Red Hat Security AdvisoryRHSA-2014:0441
Red Hat Enterprise MRG Messaging 2.5 security, bug fix, and enhancement update
Released 2014-04-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- MRG Grid Execute Node for RHEL 5 Server v.2 mrg-release-2.5.0-1.el5
- MRG Grid for RHEL 5 Server v.2 cumin-0.1.5796-2.el5_9, mrg-release-2.5.0-1.el5
- MRG Management for RHEL 5 Server v.2 cumin-0.1.5796-2.el5_9, mrg-release-2.5.0-1.el5
- Red Hat MRG Messaging for RHEL 5 Server v.2 mrg-release-2.5.0-1.el5
Fixes 1 record
Priority LOW 25
Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via a brute-force attack…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01148 · Published 2014-04-30 · Fixed CWE-310