Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:23774
HistoryApr 10, 2020 - 12:35 a.m.

Inadequate Logging

2020-04-1000:35:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.018 Low

EPSS

Percentile

88.2%

tog-pegasus does not log authentication attempts. Failed authentication attempts against the OpenPegasus CIM server were not logged to the system log as documented in README.RedHat.Security. An attacker could use this flaw to perform password guessing attacks against a user account without leaving traces in the system log.

0.018 Low

EPSS

Percentile

88.2%