Lucene search
HistoryNov 10, 2011 - 12:55 a.m.
CVE-2011-4432
cve-2011-4432
merethis centreon
password hash
security
vulnerability
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
51.7%
www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach.
Affected configurations
Node
merethiscentreonRange≤2.3.1
ORmerethiscentreonMatch1.4
ORmerethiscentreonMatch1.4.1
ORmerethiscentreonMatch1.4.2
ORmerethiscentreonMatch1.4.2.1
ORmerethiscentreonMatch1.4.2.2
ORmerethiscentreonMatch1.4.2.3
ORmerethiscentreonMatch1.4.2.4
ORmerethiscentreonMatch1.4.2.5
ORmerethiscentreonMatch1.4.2.6
ORmerethiscentreonMatch1.4.2.7
ORmerethiscentreonMatch2.0b2
ORmerethiscentreonMatch2.0b3
ORmerethiscentreonMatch2.0b4
ORmerethiscentreonMatch2.0b5
ORmerethiscentreonMatch2.0b6
ORmerethiscentreonMatch2.0rc1
ORmerethiscentreonMatch2.0rc2
ORmerethiscentreonMatch2.0rc3
ORmerethiscentreonMatch2.0rc4
ORmerethiscentreonMatch2.0rc5
ORmerethiscentreonMatch2.0.1
ORmerethiscentreonMatch2.0.2
ORmerethiscentreonMatch2.1.0
ORmerethiscentreonMatch2.1.1
ORmerethiscentreonMatch2.1.2
ORmerethiscentreonMatch2.1.3
ORmerethiscentreonMatch2.1.4
ORmerethiscentreonMatch2.1.5
ORmerethiscentreonMatch2.1.6
ORmerethiscentreonMatch2.1.7
ORmerethiscentreonMatch2.1.8
ORmerethiscentreonMatch2.1.9
ORmerethiscentreonMatch2.1.10
ORmerethiscentreonMatch2.1.11
ORmerethiscentreonMatch2.1.12
ORmerethiscentreonMatch2.1.13
ORmerethiscentreonMatch2.2
ORmerethiscentreonMatch2.2b1
ORmerethiscentreonMatch2.2rc1
ORmerethiscentreonMatch2.2rc2
ORmerethiscentreonMatch2.2.1
ORmerethiscentreonMatch2.2.2
ORmerethiscentreonMatch2.3.0
ORmerethiscentreonMatch2.3.0rc3
Related
prion
prion
Default credentials
2011-11-10 00:55:00
nvd
nvd
CVE-2011-4432
2011-11-10 00:55:00
cvelist
cvelist
CVE-2011-4432
2011-11-10 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.8 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
51.7%
Related for CVE-2011-4432