Hardcoded credentials

2014-07-0714:55:00

PRIOn knowledge base

www.prio-n.com

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.4%

JSON

lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a hard-coded salt, which makes it easier for remote attackers to guess passwords via a brute force attack.

CPENameOperatorVersion
cloudforms_3.0_management_engineeq5.2.1
cloudforms_3.0_management_enginele5.2.4
cloudforms_3.0_management_engineeq5.2.1.6
cloudforms_3.0_management_engineeq5.2.3.2
cloudforms_3.0_management_engineeq5.2.2
cloudforms_3.0_management_engineeq5.2
cloudforms_3.0_management_engineeq5.2.3

Name	Operator	Version
cloudforms_3.0_management_engine	eq	5.2.1
cloudforms_3.0_management_engine	le	5.2.4
cloudforms_3.0_management_engine	eq	5.2.1.6
cloudforms_3.0_management_engine	eq	5.2.3.2
cloudforms_3.0_management_engine	eq	5.2.2
cloudforms_3.0_management_engine	eq	5.2
cloudforms_3.0_management_engine	eq	5.2.3