Foreman CVE-2013-0173 Insecure Salt Generation Weakness
BID:67703
Info
Foreman CVE-2013-0173 Insecure Salt Generation Weakness
| Bugtraq ID: | 67703 |
| Class: | Design Error |
| CVE: |
CVE-2013-0173 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 21 2012 12:00AM |
| Updated: | Dec 21 2012 12:00AM |
| Credit: | Andreas Rogge |
| Vulnerable: |
Foreman Foreman 1.0.2 Foreman Foreman 1.0.1 |
| Not Vulnerable: |
Foreman Foreman 1.1 |
References
Foreman CVE-2013-0173 Insecure Salt Generation Weakness
References:
References:
- Foreman Homepage (Foreman)
- (encrypted) root passwords are world readable (Foreman)
- CVE-2013-0173: insecure fixed salt "foreman" for passwords (Foreman)