What is GHSA-qwgm-mxm4-3q2c?

GHSA-qwgm-mxm4-3q2c is a security advisory published by GitHub Security Advisories with Medium severity. net-ldap has weak salt when generating passwords

Which CVE IDs does GHSA-qwgm-mxm4-3q2c cover?

GHSA-qwgm-mxm4-3q2c covers the following CVE IDs: CVE-2014-0083. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qwgm-mxm4-3q2c?

GHSA-qwgm-mxm4-3q2c has a CVSS v3 base score of 5.5, published by GitHub Security Advisories.

Which products are affected by GHSA-qwgm-mxm4-3q2c?

GHSA-qwgm-mxm4-3q2c affects 1 product, including: rubygems/net-ldap:\u003c 0.16.2.

GHSA-qwgm-mxm4-3q2cMediumCVSS 5.5

net-ldap has weak salt when generating passwords

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

January 24, 2023

🔗 CVE IDs covered (1)

CVE-2014-0083 →

📋 Description

The Ruby net-ldap gem before 0.16.2 uses a weak salt when generating SSHA passwords.

🎯 Affected products1

rubygems/net-ldap:< 0.16.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2014-0083
https://github.com/ruby-ldap/ruby-net-ldap/commit/b412ca05f6b430eaa1ce97ac95885b4cf187b04a
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0083
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-0083
https://security-tracker.debian.org/tracker/CVE-2014-0083
https://github.com/advisories/GHSA-qwgm-mxm4-3q2c