EMC Cloud Tiering Appliance (CTA) 9.x through 10 SP1 and File Management Appliance (FMA) 7.x store DES password hashes for the root, super, and admin accounts, which makes it easier for context-dependent attackers to obtain sensitive information via a brute-force attack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cloud_tiering_appliance_software | Emc | 9.0 (including) | 9.0 (including) |
| Cloud_tiering_appliance_software | Emc | 10.0 (including) | 10.0 (including) |
| Cloud_tiering_appliance_software | Emc | 10.0-sp1 (including) | 10.0-sp1 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html
- http://seclists.org/fulldisclosure/2014/Mar/426
- https://gist.github.com/brandonprry/9895721
- http://archives.neohapsis.com/archives/bugtraq/2014-04/0094.html
- http://seclists.org/fulldisclosure/2014/Mar/426
- https://gist.github.com/brandonprry/9895721