CVE-2014-0083

Summary: CVE-2014-0083 concerns the Ruby net-ldap gem prior to 0.11, which uses a weak salt when generating SSHA passwords. Affected component: Ruby net-ldap (library for LDAP in Ruby). Root cause: weak or insufficiently random SSHA salt used during password hashing. Impact (as stated): password ...