CVEvulnerability
CVE-2008-4315
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-11-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.
Affected configurations
• redhat enterprise linux 5.0
• redhat enterprise linux desktop 5.0
Related
Referenced by CWE · observed example (1)
- CWE-778 Insufficient Logging weakness
References
- http://osvdb.org/50278 osvdb.org
- http://secunia.com/advisories/32862 Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1001.html www.redhat.com
- http://www.securitytracker.com/id?1021281 www.securitytracker.com
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9 admin.fedoraproject.org
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10 admin.fedoraproject.org
- https://bugzilla.redhat.com/show_bug.cgi?id=472017 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46830 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9431 oval.cisecurity.org
- http://osvdb.org/50278 osvdb.org
- http://secunia.com/advisories/32862 Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2008-1001.html www.redhat.com
- http://www.securitytracker.com/id?1021281 www.securitytracker.com
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9 admin.fedoraproject.org
- https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10 admin.fedoraproject.org
- https://bugzilla.redhat.com/show_bug.cgi?id=472017 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46830 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9431 oval.cisecurity.org