Description

The generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack.

Remediation

References

CVE-2011-2190

Related Vulnerabilities

WordPress Plugin Recent Backups Arbitrary File Download (0.7)

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-43945)

WordPress Plugin Banner Cycler Cross-Site Request Forgery (1.4)

WordPress 5.2.x Directory Traversal (5.2 - 5.2.20)

Oracle Database Server CVE-2012-0512 Vulnerability (CVE-2012-0512)

Severity

Low

Classification

CVE-2011-2190

Tags

Missing Update Known Vulnerabilities