Описание
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | ignored | |
| lucid | ignored | end of life |
| precise | ignored | |
| quantal | ignored | |
| raring | ignored | |
| saucy | ignored | |
| upstream | needs-triage |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| devel | ignored | |
| lucid | ignored | end of life |
| precise | ignored | |
| quantal | ignored | |
| raring | ignored | |
| saucy | ignored | |
| upstream | needs-triage |
Показывать по
7.8 High
CVSS2
7.5 High
CVSS3
Связанные уязвимости
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange P ...
The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.
7.8 High
CVSS2
7.5 High
CVSS3