Em resumo
- CVE-2014-3503 é uma vulnerabilidade MÉDIO (CVSS 5.0) que afeta org.apache.syncope:syncope, syncope (apache).
- Chance de exploração nos próximos 30 dias (EPSS): 6.0%, maior que 93.4% das vulnerabilidades.
- Correção: atualize para 1.1.8 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| org.apache.syncope:syncope Maven | ≥ 1.1.0, < 1.1.8
| 1.1.8
|
| syncope | = 1.1.0= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.1.5= 1.1.6= 1.1.7
| No fix yet |
Description
Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack.
NVD description
Apache Syncope 1.1.x before 1.1.8 uses weak random values to generate passwords, which makes it easier for remote attackers to guess the password via a brute force attack.
Mais vulnerabilidades de org.apache.syncope:syncope
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free