CVE-2014-2354CWE-916

Cogent DataHub Use of Password Hash With Insufficient Computational Effort

Medium · published May 30, 2014

CVSS v2.0
6.0
EPSS
1%
Percentile
51.9
In the wild
Unconfirmed
What it is

Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

The record
Technical detail
CVSS v2.0
6.0 · MEDIUM
Vector
AV:L/AC:H/Au:S/C:C/I:C/A:C
CVSS v4.0
Not supplied
EPSS
0.00688 · 51.9th percentile
Weakness
CWE-916 · Use of Password Hash With Insufficient Computational Effort
Published
2014-05-30T23:00Z
EPSS history
Timeline
  • 30 MAY 23:00Z
    Cogent DataHub Use of Password Hash With Insufficient Computational Effort
    cvelistv5