CVE-2011-4432 www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent att...
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| merethis centreon | <= 2.3.1 | No fix listed |
| merethis centreon | = 1.4 | No fix listed |
| merethis centreon | = 1.4.1 | No fix listed |
| merethis centreon | = 1.4.2 | No fix listed |
| merethis centreon | = 1.4.2.1 | No fix listed |
| merethis centreon | = 1.4.2.2 | No fix listed |
| merethis centreon | = 1.4.2.3 | No fix listed |
| merethis centreon | = 1.4.2.4 | No fix listed |
| merethis centreon | = 1.4.2.5 | No fix listed |
| merethis centreon | = 1.4.2.6 | No fix listed |
| merethis centreon | = 1.4.2.7 | No fix listed |
| merethis centreon | = 2.0-b2 | No fix listed |
| merethis centreon | = 2.0-b3 | No fix listed |
| merethis centreon | = 2.0-b4 | No fix listed |
| merethis centreon | = 2.0-b5 | No fix listed |
| merethis centreon | = 2.0-b6 | No fix listed |
| merethis centreon | = 2.0-rc1 | No fix listed |
| merethis centreon | = 2.0-rc2 | No fix listed |
| merethis centreon | = 2.0-rc3 | No fix listed |
| merethis centreon | = 2.0-rc4 | No fix listed |
| merethis centreon | = 2.0-rc5 | No fix listed |
| merethis centreon | = 2.0.1 | No fix listed |
| merethis centreon | = 2.0.2 | No fix listed |
| merethis centreon | = 2.1.0 | No fix listed |
| merethis centreon | = 2.1.1 | No fix listed |
Show 20 more
| Product | Affected versions | Fixed in |
|---|---|---|
| merethis centreon | = 2.1.2 | No fix listed |
| merethis centreon | = 2.1.3 | No fix listed |
| merethis centreon | = 2.1.4 | No fix listed |
| merethis centreon | = 2.1.5 | No fix listed |
| merethis centreon | = 2.1.6 | No fix listed |
| merethis centreon | = 2.1.7 | No fix listed |
| merethis centreon | = 2.1.8 | No fix listed |
| merethis centreon | = 2.1.9 | No fix listed |
| merethis centreon | = 2.1.10 | No fix listed |
| merethis centreon | = 2.1.11 | No fix listed |
| merethis centreon | = 2.1.12 | No fix listed |
| merethis centreon | = 2.1.13 | No fix listed |
| merethis centreon | = 2.2 | No fix listed |
| merethis centreon | = 2.2-b1 | No fix listed |
| merethis centreon | = 2.2-rc1 | No fix listed |
| merethis centreon | = 2.2-rc2 | No fix listed |
| merethis centreon | = 2.2.1 | No fix listed |
| merethis centreon | = 2.2.2 | No fix listed |
| merethis centreon | = 2.3.0 | No fix listed |
| merethis centreon | = 2.3.0-rc3 | No fix listed |
References
- 8530 third-party-advisory
- www.trustwave.com exploit