Versa-networks Versa Analytics
Approved changes feed: RSS · Atom
cpe:2.3:a:versa-networks:versa_analytics:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Versa Networks (b3b8e39f-8cd4-5242-8ad1-4b4cc51ec686) |
|---|---|
| Product | Versa Analytics (4c4b806d-4245-540c-a8c3-0aa21833cc37) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-25030 |
vulnerable | 2026-06-08 05:13:41.843024 |
Details available
In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or key derivation function prior to storage. Popular hashing algorithms based on the Merkle-Damgardconstruction (such as MD5 and SHA-1) alone are insufficient in thwarting password cracking. Attackers can generate and use precomputed hashes for all possible password character combinations (commonly referred to as "rainbow tables") relatively quickly. The use of adaptive hashing algorithms such asscryptorbcryptor Key-Derivation Functions (i.e.PBKDF2) to hash passwords make generation of such rainbow tables computationally infeasible.
Published: 2021-05-26T18:45:38.000Z
Updated: 2024-08-05T03:00:19.000Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-16497 |
vulnerable | 2026-06-08 05:11:04.958324 |
Details available
In Versa Analytics, the cron jobs are used for scheduling tasks by executing commands at specific dates and times on the server. If the job is run as the user root, there is a potential privilege escalation vulnerability. In this case, the job runs a script as root that is writable by users who are members of the versa group.
Published: 2021-05-26T18:45:57.000Z
Updated: 2024-08-05T10:24:32.964Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.