net-ldap has weak salt when generating passwords

MEDIO 5.5CVE-2014-0083 · GHSA-qwgm-mxm4-3q2c · Published 21/11/2019 · updated 17/06/2026

In breve

CVE-2014-0083 è una vulnerabilità MEDIO (CVSS 5.5) che riguarda net-ldap, net-ldap (net-ldap project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.27%, superiore al 20.1% delle vulnerabilità.
Correzione: aggiornare a 0.16.2 o successiva.

Package	Affected versions	Patched versions
net-ldap RubyGems	`< 0.16.2`	`0.16.2`
net-ldap net-ldap_project	`< 0.16.2`	`0.16.2`

The Ruby net-ldap gem before 0.16.2 uses a weak salt when generating SSHA passwords.

NVD description

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.