CVE-2013-0173

Foreman before version 1.1 uses a fixed salt named “foreman” to hash root passwords, making brute-force guessing easier. The vulnerability affects the password-hashing path in Foreman pre-1.1; the root credential protection is weakened due to the non-unique, predictable salt. The available source...