CVE Vulnerability

CVE-2008-4315

tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.

6.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10
https://bugzilla.redhat.com/show_bug.cgi?id=472017
http://www.redhat.com/support/errata/RHSA-2008-1001.html
https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9
http://secunia.com/advisories/32862 Vendor Advisory
http://www.securitytracker.com/id?1021281
http://osvdb.org/50278
https://exchange.xforce.ibmcloud.com/vulnerabilities/46830
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9431
Configurations

Configuration 1
Information

Published : 2008-11-27 12:30

Updated : 2017-09-29 01:32

NVD link : CVE-2008-4315

Mitre link : CVE-2008-4315

Products Affected
No products.
CWE
CWE-778

Insufficient Logging