4.3

CVE-2014-4623

EPSS 0.33%
Veröffentlicht 25.10.2014 10:55:06
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle security_alert@emc.com
CVE-Watchlists
Login
Unerledigt
Login

EMC Avamar 6.0.x, 6.1.x, and 7.0.x in Avamar Data Store (ADS) GEN4(S) and Avamar Virtual Edition (AVE), when Password Hardening before 2.0.0.4 is enabled, uses UNIX DES crypt for password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Emc ≫ Avamar Version6.0.1

Emc ≫ Avamar Version6.0.2

Emc ≫ Avamar Version6.0.3

Emc ≫ Avamar Version6.1

Emc ≫ Avamar Version6.1.101-87

Emc ≫ Avamar Version7.0

Emc ≫ Avamar Version7.0 Updatesp1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.33%	0.53

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

http://archives.neohapsis.com/archives/bugtraq/2014-10/0146.html

http://packetstormsecurity.com/files/128842/EMC-Avamar-Weak-Password-Storage.html

http://www.securityfocus.com/bid/70732

http://www.securitytracker.com/id/1031117

https://exchange.xforce.ibmcloud.com/vulnerabilities/97757

https://nvd.nist.gov/vuln/detail/CVE-2014-4623

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-4623

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-4623

EUVD