Security Advisory
CVE-2014-9251
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Zenoss Core through 5 Beta 3 uses a weak algorithm to hash passwords, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack on hash values in the database, aka ZEN-15413.