Untriaged
Cogent DataHub before 7.3.5 does not use a salt during …
Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.
References
- http://ics-cert.us-cert.gov/advisories/ICSA-14-149-02 x_refsource_MISC
- http://ics-cert.us-cert.gov/advisories/ICSA-14-149-02 x_refsource_MISC x_transferred
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-149-02
- http://cogentdatahub.com/Download_Software.html
- http://ics-cert.us-cert.gov/advisories/ICSA-14-149-02 x_refsource_MISC x_transferred
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-149-02
- http://cogentdatahub.com/Download_Software.html
- http://ics-cert.us-cert.gov/advisories/ICSA-14-149-02 x_refsource_MISC x_transferred
Affected products
n/a
- ==n/a
DataHub
- <7.3.5
Matching in nixpkgs
pkgs.python312Packages.cryptodatahub
Repository of cryptography-related data
pkgs.python313Packages.cryptodatahub
Repository of cryptography-related data
pkgs.python314Packages.cryptodatahub
Repository of cryptography-related data
Package maintainers
-
@Prince213 Sizhe Zhao <prc.zhao@outlook.com>
-
@ethancedwards8 Ethan Carter Edwards <ethan@ethancedwards.com>
-
@wegank Weijia Wang <contact@weijia.wang>
-
@OPNA2608 Cosima Neidahl <opna2608@protonmail.com>
-
@phanirithvij Phani Rithvij <phanirithvij2000@gmail.com>
-
@eljamm Fedi Jamoussi <fedi.jamoussi@protonmail.ch>