CVE-2014-0645

EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack.

CVSS v2.0 4.7 MEDIUM

4.7^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:M/Au:N/C:C/I:N/A:N

Exploitability : 3.4 / Impact : 6.9

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html
http://seclists.org/fulldisclosure/2014/Mar/426
https://gist.github.com/brandonprry/9895721

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:emc:cloud_tiering_appliance_software:9.0:::::::*
	cpe:2.3:a:emc:cloud_tiering_appliance_software:10.0:-::::::
	cpe:2.3:a:emc:cloud_tiering_appliance_software:10.0:sp1::::::

cpe:2.3:h:emc:cloud_tiering_appliance:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:a:emc:file_management_appliance_software:7.0:*:*:*:*:*:*:*

cpe:2.3:h:emc:file_management_appliance:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2014-04-17 01:55

Updated : 2024-02-28 12:20

NVD link : CVE-2014-0645

Mitre link : CVE-2014-0645

CVE.ORG link : CVE-2014-0645

JSON object : View

Products Affected

emc

file_management_appliance_software
cloud_tiering_appliance
file_management_appliance
cloud_tiering_appliance_software

CWE

CWE-255

Credentials Management Errors

{"id": "CVE-2014-0645", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.7, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:C/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-04-17T01:55:05.690", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html", "source": "security_alert@emc.com"}, {"url": "http://seclists.org/fulldisclosure/2014/Mar/426", "source": "security_alert@emc.com"}, {"url": "https://gist.github.com/brandonprry/9895721", "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-255"}]}], "descriptions": [{"lang": "en", "value": "EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack."}, {"lang": "es", "value": "EMC Cloud Tiering Appliance (CTA) 9.x hasta 10 SP1 y File Management Appliance (FMA) 7.x almacene hashes de contrase\u00f1as DES para las cuentas root, super, y de administraci\u00f3n, lo que facilita a atacantes dependientes de contexto obtener informaci\u00f3n sensible a trav\u00e9s de un ataque de fuerza bruta."}], "lastModified": "2014-04-17T15:10:45.367", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:emc:cloud_tiering_appliance_software:9.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBC97A0E-D9FB-41D8-B9B0-476E9603CD8A"}, {"criteria": "cpe:2.3:a:emc:cloud_tiering_appliance_software:10.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "487F9218-321C-460C-9BDE-D52EB35CE445"}, {"criteria": "cpe:2.3:a:emc:cloud_tiering_appliance_software:10.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "27ED383B-FA3D-40C6-92D6-6F116F3848C4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:emc:cloud_tiering_appliance:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "106228B2-5481-4806-BBEE-AF2F083DB41D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:emc:file_management_appliance_software:7.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3D8065F-B362-4B9B-83ED-CEBA04D75384"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:emc:file_management_appliance:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C888E2C-12BE-43F0-B5DB-54AC71E5A857"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security_alert@emc.com"}