CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3489

lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a hard-coded salt, which makes it easier for remote attackers to guess passwords via a brute force attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.0%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2014-3489

Redhat » Cloudforms 3.0 Management Engine » Version: N/A

cpe:2.3:a:redhat:cloudforms_3.0_management_engine:-
Redhat » Cloudforms 3.0 Management Engine » Version: 5.2

cpe:2.3:a:redhat:cloudforms_3.0_management_engine:5.2
Redhat » Cloudforms 3.0 Management Engine » Version: 5.2.1

cpe:2.3:a:redhat:cloudforms_3.0_management_engine:5.2.1
Redhat » Cloudforms 3.0 Management Engine » Version: 5.2.1.6

cpe:2.3:a:redhat:cloudforms_3.0_management_engine:5.2.1.6
Redhat » Cloudforms 3.0 Management Engine » Version: 5.2.2

cpe:2.3:a:redhat:cloudforms_3.0_management_engine:5.2.2
Redhat » Cloudforms 3.0 Management Engine » Version: 5.2.3

cpe:2.3:a:redhat:cloudforms_3.0_management_engine:5.2.3
Redhat » Cloudforms 3.0 Management Engine » Version: 5.2.3.2

cpe:2.3:a:redhat:cloudforms_3.0_management_engine:5.2.3.2
Redhat » Cloudforms 3.0 Management Engine » Version: 5.2.4

cpe:2.3:a:redhat:cloudforms_3.0_management_engine:5.2.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2014-3489

Products

Pricing

Contact Us