CVE-2011-4432
Severity CVSS v4.0:
Pending analysis
Type:
CWE-310
Cryptographic Issues
Publication date:
10/11/2011
Last modified:
11/04/2025
Description
www/include/configuration/nconfigObject/contact/DB-Func.php in Merethis Centreon before 2.3.2 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach.
Impact
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:merethis:centreon:*:*:*:*:*:*:*:* | 2.3.1 (including) | |
| cpe:2.3:a:merethis:centreon:1.4:*:*:*:*:*:*:* | ||
| cpe:2.3:a:merethis:centreon:1.4.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:merethis:centreon:1.4.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:merethis:centreon:1.4.2.1:*:*:*:*:*:*:* | ||
| cpe:2.3:a:merethis:centreon:1.4.2.2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:merethis:centreon:1.4.2.3:*:*:*:*:*:*:* | ||
| cpe:2.3:a:merethis:centreon:1.4.2.4:*:*:*:*:*:*:* | ||
| cpe:2.3:a:merethis:centreon:1.4.2.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:merethis:centreon:1.4.2.6:*:*:*:*:*:*:* | ||
| cpe:2.3:a:merethis:centreon:1.4.2.7:*:*:*:*:*:*:* | ||
| cpe:2.3:a:merethis:centreon:2.0:b2:*:*:*:*:*:* | ||
| cpe:2.3:a:merethis:centreon:2.0:b3:*:*:*:*:*:* | ||
| cpe:2.3:a:merethis:centreon:2.0:b4:*:*:*:*:*:* | ||
| cpe:2.3:a:merethis:centreon:2.0:b5:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page