net-ldap has weak salt when generating passwords

보통 5.5CVE-2014-0083 · GHSA-qwgm-mxm4-3q2c · Published 21/11/2019 · updated 17/06/2026

요약

CVE-2014-0083은(는) net-ldap, net-ldap (net-ldap project)에 영향을 주는 보통 (CVSS 5.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.27%, 전체 취약점의 20.1%보다 높음.
조치: 0.16.2 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
net-ldap RubyGems	`< 0.16.2`	`0.16.2`
net-ldap net-ldap_project	`< 0.16.2`	`0.16.2`

The Ruby net-ldap gem before 0.16.2 uses a weak salt when generating SSHA passwords.

NVD description

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.