The generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2011-10-07 02:51
Updated : 2024-02-28 11:41
NVD link : CVE-2011-2190
Mitre link : CVE-2011-2190
CVE.ORG link : CVE-2011-2190
JSON object : View
Products Affected
cherokee-project
- cherokee
CWE
CWE-310
Cryptographic Issues