CVE-2012-2742

{"id": "CVE-2012-2742", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2012-06-27T22:55:01.520", "references": [{"url": "http://knoxin.blogspot.co.uk/2012/06/revelation-password-manager-considered.html", "source": "secalert@redhat.com"}, {"url": "http://oss.codepoet.no/revelation/issue/61/file-format-magic-string-version-mismatch", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2012/06/18/1", "source": "secalert@redhat.com"}, {"url": "http://www.openwall.com/lists/oss-security/2012/06/18/3", "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/54060", "source": "secalert@redhat.com"}, {"url": "https://bugs.gentoo.org/show_bug.cgi?id=421571", "source": "secalert@redhat.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/76407", "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-255"}]}], "descriptions": [{"lang": "en", "value": "Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack."}, {"lang": "es", "value": "Revelation v0.4.13-2 y anteriores solamente usa los primeros 32 caracteres de una contrase\u00f1a seguido por una secuencia de ceros, lo que reduce la entrop\u00eda y hace m\u00e1s f\u00e1cil para los atacantes dependientes de contexto descifrar contrase\u00f1as y obtener acceso a las claves a trav\u00e9s de un ataque de fuerza bruta."}], "lastModified": "2017-08-29T01:31:41.570", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "314159CF-0626-44BC-9D5D-EE1077C3AED6", "versionEndIncluding": "0.4.13-2"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5BBB719-4CA3-46CB-BF18-1B6D83C640C7"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "728EBEA8-8D8B-4FC2-9DCD-B6543DC04FA4"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6763F981-8A35-4A2E-A699-06227B8FC628"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEAF6C4D-54F0-4224-A84B-F11A8DFE6AE0"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB3C5098-149B-4CC4-8091-2CEC591F95D5"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DD152ECE-AB36-4602-995C-AEDE9A42D6F9"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93378459-2D11-4570-A15B-E4E9B1E0B34D"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D8A2E5A2-15A3-442A-97A8-778745898D58"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCF2830E-DF74-4FC9-82B5-711EE75637A8"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1363B73-25C3-4B3C-BCBF-DB848D740345"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50DAC843-9A69-4BF0-B491-28CFFF6528B2"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC044A19-8A72-4953-8AFB-658334D7748A"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5A20FD9A-5E5B-4A5A-9173-AEC93B661FFF"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DACFF6F5-BBCA-41DD-886F-BBC3331CF59E"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F94F2634-19D7-4192-9482-A2E5B2F32643"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "799BFE0D-9A8A-490C-822A-20323006A7F2"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03869FC3-75E3-44F7-8E65-EA90DA6152D6"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E55FCC6-8D3D-4094-9DC1-63E94E8092A0"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "044857B2-A1B3-4017-953D-67D70E16AAA9"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FD94093A-523A-4878-9C01-F943B4CC8D11"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D59D8D21-4438-418F-9AC6-4543DA32E255"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CEAD892F-F054-436A-8465-76D214C37A71"}, {"criteria": "cpe:2.3:a:mikel_olasagasti:revelation:0.4.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "405092E2-81E9-4DF6-B4C8-1C11DC386255"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}