NVD

Id
29529  
Name
CVE-2014-0645  
Description
EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack.  
Reject
 
CVSS Version
2  
CVSS Score
4.7  
Severity
Medium  
CVSS Base Score
4.7  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-04-16  
Modified Date
2014-04-17  
Seq
2014-0645  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
156471 29529 CVE-2014-0645 20140416 ESA-2014-028: EMC Cloud Tiering Appliance XML External Entity (XXE) and Information Disclosure Vulnerabilities  View
156472 29529 CVE-2014-0645 20140331 EMC CTA v10.0 unauthenticated XXE with root perms  View
156473 29529 CVE-2014-0645 https://gist.github.com/brandonprry/9895721  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
13291 JVNDB-2014-002166 EMC Cloud Tiering Appliance および File Management Appliance における重要な情報を取得される脆弱性 EMC Cloud Tiering Appliance (CTA) および File Management Appliance (FMA) は、root、super、および管理者アカウント用の DES のパスワードハッシュを保存するため、重要な情報を取得される脆弱性が存在します。 CVE-2014-0645 68046 CVE-2014-0645 29529 4.7 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002166.html 2014-04-01 2014-04-21 View