CVE-2014-3489
lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a hard-coded salt, which makes it easier for remote attackers to guess passwords via a brute force attack.
Ver en NVDSeveridad
N/A
EPSS
Probabilidad de explotación (próx. 30 días): 0.0040 (0.4%)
Percentil: 60.8%
EPSS: 2026-05-06
Afecta
redhat:cloudforms_3.0_management_engineDescripción técnica
lib/util/miq-password.rb in Red Hat CloudForms 3.0 Management Engine (CFME) before 5.2.4.2 uses a hard-coded salt, which makes it easier for remote attackers to guess passwords via a brute force attack.
Publicada: 7/7/2014, 14:55:04
Última modificación: 6/5/2026, 22:30:45