Vulnerabilities > CVE-2012-2743 - Credentials Management vulnerability in Mikel Olasagasti Revelation

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

mikel-olasagasti

CWE-255

NVD

Published: 2012-06-27

Updated: 2017-08-29

Summary

Revelation 0.4.13-2 and earlier does not iterate through SHA hashing algorithms for AES encryption, which makes it easier for context-dependent attackers to guess passwords via a brute force attack.

Vulnerable Configurations

Part	Description	Count
Application	Mikel_Olasagasti Mikel Olasagasti Revelation 0.1.0 Mikel Olasagasti Revelation 0.1.1 Mikel Olasagasti Revelation 0.1.2 Mikel Olasagasti Revelation 0.2.0 Mikel Olasagasti Revelation 0.2.1 Mikel Olasagasti Revelation 0.3.0 Mikel Olasagasti Revelation 0.3.1 Mikel Olasagasti Revelation 0.3.2 Mikel Olasagasti Revelation 0.3.3 Mikel Olasagasti Revelation 0.3.4 Mikel Olasagasti Revelation 0.4.0 Mikel Olasagasti Revelation 0.4.1 Mikel Olasagasti Revelation 0.4.2 Mikel Olasagasti Revelation 0.4.3 Mikel Olasagasti Revelation 0.4.4 Mikel Olasagasti Revelation 0.4.5 Mikel Olasagasti Revelation 0.4.6 Mikel Olasagasti Revelation 0.4.7 Mikel Olasagasti Revelation 0.4.8 Mikel Olasagasti Revelation 0.4.9 Mikel Olasagasti Revelation 0.4.10 Mikel Olasagasti Revelation 0.4.11 Mikel Olasagasti Revelation 0.4.12 Mikel Olasagasti Revelation *	24

Common Weakness Enumeration (CWE)

CWE-255 - Credentials Management

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References