← All advisories

Moderate severityNVD Advisory· Published Nov 21, 2019· Updated Aug 6, 2024

CVE-2014-0083

CVE-2014-0083

Description

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
net-ldapRubyGems	< 0.16.2	0.16.2

Affected products

2

ghsa-coords
pkg:gem/net-ldap
Range: < 0.16.2
ruby-net-ldap/ruby-net-ldapv5
Range: 0.16.2

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-qwgm-mxm4-3q2cghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2014-0083ghsaADVISORY
bugzilla.redhat.com/show_bug.cgighsax_refsource_MISCWEB
bugzilla.suse.com/show_bug.cgighsax_refsource_MISCWEB
github.com/ruby-ldap/ruby-net-ldap/commit/b412ca05f6b430eaa1ce97ac95885b4cf187b04aghsax_refsource_CONFIRMWEB
security-tracker.debian.org/tracker/CVE-2014-0083ghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.