Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Cogent DataHub 7.3.5 Clear all filters
TI-2014-01869 CVE-2014-2354 · GHSA-xmw2-2pgj-jq4h

Cogent DataHub Use of Password Hash With Insufficient Computational Effort

Priority LOW 28

Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

CVSS 2.0MEDIUM 6.0 Local Low privileges Interaction — EPSS 0.00688 Published 2014-05-30 Fixed in 7.3.5 CWE-916
TI-2014-01868 CVE-2014-2353 · GHSA-m782-vf42-h3fp

Cogent DataHub XSS

Priority LOW 36

Cross-site scripting (XSS) vulnerability in Cogent DataHub before 7.3.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.02466 Published 2014-05-30 Fixed in 7.3.5 CWE-80
TI-2014-01867 CVE-2014-2352 · GHSA-76vr-x382-ppf5

Cogent DataHub Path Traversal

Priority LOW 38

The directory specifier can include designators that can be used to traverse the directory path.

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02311 Published 2014-05-30 Fixed in 7.3.5 CWE-22