4.3

CVE-2014-4623

EPSS 0.33%
Published 25.10.2014 10:55:06
Last modified 12.04.2025 10:46:40
Source security_alert@emc.com
Teams watchlist Login
Open Login

EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS) GEN4(S) and Avamar Virtual Edition (AVE), when Password Hardening before 2.0.0.4 is enabled, uses UNIX DES crypt for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Emc ≫ Avamar Version6.0.1

Emc ≫ Avamar Version6.0.2

Emc ≫ Avamar Version6.0.3

Emc ≫ Avamar Version6.1

Emc ≫ Avamar Version6.1.101-87

Emc ≫ Avamar Version7.0

Emc ≫ Avamar Version7.0 Updatesp1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.33%	0.53

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

http://archives.neohapsis.com/archives/bugtraq/2014-10/0146.html

http://packetstormsecurity.com/files/128842/EMC-Avamar-Weak-Password-Storage.html

http://www.securityfocus.com/bid/70732

http://www.securitytracker.com/id/1031117

https://exchange.xforce.ibmcloud.com/vulnerabilities/97757

https://nvd.nist.gov/vuln/detail/CVE-2014-4623

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-4623

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-4623

EUVD