Mikel Olasagasti Revelation up to 0.4.13-2 credentials management

Summaryinfo

A vulnerability classified as critical was found in Mikel Olasagasti Revelation. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to credentials management. This vulnerability appears as CVE-2012-2742. There is no available exploit.

Detailsinfo

A vulnerability classified as critical was found in Mikel Olasagasti Revelation. This vulnerability affects an unknown function. The manipulation with an unknown input leads to a credentials management vulnerability. The CWE definition for the vulnerability is CWE-255. As an impact it is known to affect confidentiality. CVE summarizes:

Revelation 0.4.13-2 and earlier uses only the first 32 characters of a password followed by a sequence of zeros, which reduces the entropy and makes it easier for context-dependent attackers to crack passwords and obtain access to keys via a brute-force attack.

The weakness was presented 06/27/2012 (Website). The advisory is available at bugs.gentoo.org. This vulnerability was named CVE-2012-2742 since 05/14/2012. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1552 by the MITRE ATT&CK project.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the databases at X-Force (76407) and SecurityFocus (BID 54060†). See VDB-61139 for similar entry. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• Mikel Olasagasti

Name

• Revelation

Version

• 0.1.0
• 0.1.1
• 0.1.2
• 0.2.0
• 0.2.1
• 0.3.0
• 0.3.1
• 0.3.2
• 0.3.3
• 0.3.4
• 0.4.0
• 0.4.1
• 0.4.2
• 0.4.3
• 0.4.4
• 0.4.5
• 0.4.6
• 0.4.7
• 0.4.8
• 0.4.9
• 0.4.10
• 0.4.11
• 0.4.12
• 0.4.13-2

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion