Lucene search
+L

68 matches found

OSV
OSV
added 2012/07/31 10:45 a.m.18 views

CVE-2012-3426

OpenStack Keystone before 2012.1.1, as used in OpenStack Folsom before Folsom-1 and OpenStack Essex, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by 1 creating new tokens through token chaining, 2 leveraging...

6.1AI score
SaveExploits0References16
OSV
OSV
added 2012/06/04 7:55 p.m.17 views

CVE-2011-2082

The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algorithm for disabled user accounts, which makes it easier for context-dependent attackers to determine cleartext passwords, and possibly use these passwords...

6.2AI score
SaveExploits0References5
Prion
Prion
added 2012/06/04 7:55 p.m.28 views

Design/Logic Flaw

The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algorithm for disabled user accounts, which makes it easier for context-dependent attackers to determine cleartext passwords, and possibly use these passwords...

5CVSS6.8AI score0.01879EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2012/06/04 7:00 p.m.49 views

CVE-2011-2082

The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algorithm for disabled user accounts, which makes it easier for context-dependent attackers to determine cleartext passwords, and possibly use these passwords...

6.1AI score0.01191EPSS
SaveExploits0References5
Debian CVE
Debian CVE
added 2012/06/04 7:00 p.m.58 views

CVE-2011-2082

The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algorithm for disabled user accounts, which makes it easier for context-dependent attackers to determine cleartext passwords, and possibly use these passwords...

5CVSS7.2AI score0.01191EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2002/03/17 12:00 a.m.39 views

Microsoft Windows - Local Users Information : Disabled Accounts

Using the supplied credentials, Nessus was able to list local user accounts that have been disabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10913; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Local User...

5.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2002/03/15 12:00 a.m.25 views

Microsoft Windows - Users Information : Disabled Accounts

Using the supplied credentials, Nessus was able to list user accounts that have been disabled. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10897; scriptversion"1.19"; scriptcvsdate"Date: 2018/08/13 14:32:39"; scriptnameenglish:"Microsoft Windows - Users Informatio...

5.4AI score
SaveExploits0
securityvulns
securityvulns
added 2002/02/08 12:00 a.m.37 views

Security Advisory: Cisco Secure Access Control Server Novell Directory Service Expired/Disabled User Authentication Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Cisco Security Advisory: Cisco Secure Access Control Server Novell Directory Service Expired/Disabled User Authentication Vulnerability ========================================================================== Revision 1.0 For Public Release 2002 February 07...

0.1AI score
SaveExploits0
Rows per page
Query Builder