En resumen
- CVE-2014-3503 es una vulnerabilidad MEDIO (CVSS 5.0) que afecta a org.apache.syncope:syncope, syncope (apache).
- Probabilidad de explotación en los próximos 30 días (EPSS): 6.0%, mayor que el 93.4% de las vulnerabilidades.
- Solución: actualizar a 1.1.8 o posterior.
| Package | Affected versions | Patched versions |
|---|
| org.apache.syncope:syncope Maven | ≥ 1.1.0, < 1.1.8
| 1.1.8
|
| syncope | = 1.1.0= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7
| No fix yet |
Description
Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack.
NVD description
Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack.
Más vulnerabilidades de org.apache.syncope:syncope
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free