NVD

Id
83226  
Name
CVE-2017-5619  
Description
An issue was discovered in Zammad before 1.0.4, 1.1.x before 1.1.3, and 1.2.x before 1.2.1. Attackers can login with the hashed password itself (e.g., from the DB) instead of the valid password string.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-03-18  
Published
2017-03-13  
Modified Date
2017-03-17  
Seq
2017-5619  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
409033 83226 CVE-2016-1245 http://www.gossamer-threads.com/lists/quagga/users/31952  View
409034 83226 CVE-2016-1245 93775  View
409035 83226 CVE-2016-1245 https://bugzilla.redhat.com/show_bug.cgi?id=1386109  View
409036 83226 CVE-2016-1245 https://github.com/Quagga/quagga/commit/cfb1fae25f8c092e0d17073eaf7bd428ce1cd546  View
409037 83226 CVE-2016-1245 https://www.debian.org/security/2016/dsa-3695  View
409038 83226 CVE-2016-1245 http://www.gossamer-threads.com/lists/quagga/users/31952  View
409039 83226 CVE-2016-1245 93775  View
409040 83226 CVE-2016-1245 https://bugzilla.redhat.com/show_bug.cgi?id=1386109  View
409041 83226 CVE-2016-1245 https://github.com/Quagga/quagga/commit/cfb1fae25f8c092e0d17073eaf7bd428ce1cd546  View
409042 83226 CVE-2016-1245 https://www.debian.org/security/2016/dsa-3695  View
411278 83226 CVE-2017-0532 96834  View
411279 83226 CVE-2017-0532 https://source.android.com/security/bulletin/2017-03-01.html  View
411280 83226 CVE-2017-0532 96834  View
411281 83226 CVE-2017-0532 https://source.android.com/security/bulletin/2017-03-01.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65866 JVNDB-2017-002205 Zammad におけるハッシュ化されたパスワード自体でログインされる脆弱性 Zammad には、有効なパスワード文字列の代わりに、(例えば、DBから) ハッシュ化されたパスワード自体でログインされる脆弱性が存在します。 CVE-2017-5619 CVE-2017-5619 83226 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002205.html 2017-02-14 2017-04-03 View