The generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2011-10-06 19:51
Updated : 2012-05-13 21:00
NVD link : CVE-2011-2190
Mitre link : CVE-2011-2190
JSON object : View
CWE
CWE-310
Cryptographic Issues
Products Affected
cherokee-project
- cherokee