4.3

CVE-2014-4623

EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS) GEN4(S) and Avamar Virtual Edition (AVE), when Password Hardening before 2.0.0.4 is enabled, uses UNIX DES crypt for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Emc ≫ Avamar Version6.0.1
Emc ≫ Avamar Version6.0.2
Emc ≫ Avamar Version6.0.3
Emc ≫ Avamar Version6.1
Emc ≫ Avamar Version6.1.101-87
Emc ≫ Avamar Version7.0
Emc ≫ Avamar Version7.0 Updatesp1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.59% 0.725
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/bugtraq/2014-10/0146.html
http://packetstormsecurity.com/files/128842/EMC-Avamar-Weak-Password-Storage.html
http://www.securityfocus.com/bid/70732
http://www.securitytracker.com/id/1031117
https://exchange.xforce.ibmcloud.com/vulnerabilities/97757