PT-2014-3119

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise MRG version 2.5 Description The issue makes it easier for attackers to obtain sensitive information via a brute-force attack due to the use of the DES-based crypt function to hash passwords. Recommendations For Red Hat...

cumin: weak password hashing

Cumin aka MRG Management Console, as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via a brute-force attack...