Description

The generate_admin_password function in Cherokee before 1.2.99 uses time and PID values for seeding of a random number generator, which makes it easier for local users to determine admin passwords via a brute-force attack.

Remediation

References

CVE-2011-2190

Related Vulnerabilities

RubyGems Origin Validation Error Vulnerability (CVE-2017-0902)

WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.6)

Magento Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2020-9689)

Apache Tomcat version older than 5.5.25

WordPress Plugin WP Support Plus Responsive Ticket System Unspecified Vulnerability (8.0.7)

Severity

Low

Classification

CVE-2011-2190

Tags

Missing Update Known Vulnerabilities