Vulnerabilities > CVE-2014-9248 - Credentials Management vulnerability in Zenoss Core

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
zenoss
CWE-255

Summary

Zenoss Core through 5 Beta 3 does not require complex passwords, which makes it easier for remote attackers to obtain access via a brute-force attack, aka ZEN-15406.

Common Weakness Enumeration (CWE)

Statements

contributorZenoss
lastmodified2016-03-21
organizationZenoss
statementAddressed in 5.1.1