Redhat : Security Vulnerabilities, CVEs, Published In November 2008
tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.
Max CVSS
6.8
EPSS Score
1.78%
Published
2008-11-27
Updated
2017-09-29
A certain Red Hat patch for tog-pegasus in OpenGroup Pegasus 2.7.0 does not properly configure the PAM tty name, which allows remote authenticated users to bypass intended access restrictions and send requests to OpenPegasus WBEM services.
Max CVSS
6.0
EPSS Score
0.36%
Published
2008-11-27
Updated
2017-09-29
2 vulnerabilities found