CVEvulnerability
CVE-2014-0645
4.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-04-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.7 MEDIUM — AV:L/AC:M/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-255
Description
EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack.
Affected configurations
• emc cloud tiering appliance software 9.0
• emc cloud tiering appliance software 10.0
• emc cloud tiering appliance
• emc file management appliance software 7.0
• emc file management appliance
Related
Weakness · not in database (1)
References
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html archives.neohapsis.com
- http://seclists.org/fulldisclosure/2014/Mar/426 seclists.org
- https://gist.github.com/brandonprry/9895721 gist.github.com
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html archives.neohapsis.com
- http://seclists.org/fulldisclosure/2014/Mar/426 seclists.org
- https://gist.github.com/brandonprry/9895721 gist.github.com