CVE-2014-2354

Description

Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

References

https://www.cisa.gov/news-events/ics-advisories/icsa-14-149-02

https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-2391

http://ics-cert.us-cert.gov/advisories/ICSA-14-149-02

http://cogentdatahub.com/Download_Software.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS