CVE-2014-6254

概要

参考情報

• kb.cert.org/vuls/id/449452 · Third Party Advisory
• docs.google.com/spreadsheets/d/1dHAc4PxUbs-4Dxzm1wSCE0sMz5UCMY6SW3PlMHSyuuQ/edit · Vendor Advisory

zenoss core のその他の脆弱性

• CVE-2014-6262高 7.5Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote…
• CVE-2014-9386中 6.8Zenoss Core before 4.2.5 SP161 sets an infinite lifetime for the session ID cookie, which makes it easier for remote attackers to hijack ses…
• CVE-2014-9385中 6.8Cross-site request forgery (CSRF) vulnerability in Zenoss Core through 5 Beta 3 allows remote attackers to hijack the authentication of arbi…
• CVE-2014-9252低 2.1Zenoss Core through 5 Beta 3 stores cleartext passwords in the session database, which might allow local users to obtain sensitive informati…
• CVE-2014-9251中 5.0Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleart…