nvd-json-data-feeds/CVE-2014/CVE-2014-06xx/CVE-2014-0645.json

{
  "id": "CVE-2014-0645",
  "sourceIdentifier": "security_alert@emc.com",
  "published": "2014-04-17T01:55:05.690",
  "lastModified": "2014-04-17T15:10:45.367",
  "vulnStatus": "Analyzed",
  "descriptions": [
    {
      "lang": "en",
      "value": "EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack."
    },
    {
      "lang": "es",
      "value": "EMC Cloud Tiering Appliance (CTA) 9.x hasta 10 SP1 y File Management Appliance (FMA) 7.x almacene hashes de contrase\u00f1as DES para las cuentas root, super, y de administraci\u00f3n, lo que facilita a atacantes dependientes de contexto obtener informaci\u00f3n sensible a trav\u00e9s de un ataque de fuerza bruta."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:N/A:N",
          "accessVector": "LOCAL",
          "accessComplexity": "MEDIUM",
          "authentication": "NONE",
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.7
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 3.4,
        "impactScore": 6.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "configurations": [
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:emc:cloud_tiering_appliance_software:9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DBC97A0E-D9FB-41D8-B9B0-476E9603CD8A"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:emc:cloud_tiering_appliance_software:10.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "487F9218-321C-460C-9BDE-D52EB35CE445"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:emc:cloud_tiering_appliance_software:10.0:sp1:*:*:*:*:*:*",
              "matchCriteriaId": "27ED383B-FA3D-40C6-92D6-6F116F3848C4"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:h:emc:cloud_tiering_appliance:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "106228B2-5481-4806-BBEE-AF2F083DB41D"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:emc:file_management_appliance_software:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B3D8065F-B362-4B9B-83ED-CEBA04D75384"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:h:emc:file_management_appliance:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C888E2C-12BE-43F0-B5DB-54AC71E5A857"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html",
      "source": "security_alert@emc.com"
    },
    {
      "url": "http://seclists.org/fulldisclosure/2014/Mar/426",
      "source": "security_alert@emc.com"
    },
    {
      "url": "https://gist.github.com/brandonprry/9895721",
      "source": "security_alert@emc.com"
    }
  ]
}