CVE-2014-0083 (net-ldap): CVE-2014-0083 rubygem-net-ldap: SSHA passwords generated by the net-ldap Ruby gem use a weak salt

CVE: CVE-2014-0083 ( NVD )
GHSA: GHSA-qwgm-mxm4-3q2c
OSVDB: OSVDB-106108

February 13th, 2014

CVE-2014-0083 rubygem-net-ldap: SSHA passwords generated by the net-ldap Ruby gem use a weak salt

Published: February 13, 2014

CVSS v3.x: 5.5 (Medium)

CVSS v2.0: 1.9 (Low)

>= 0.6.0

The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.