CVE-2015-2864
- State
- Published
- Severity
- Not scored
- Published
- Sep 21, 2015
- Updated
- Aug 6, 2024
- Reserved
- Apr 3, 2015
Description
Retrospect and Retrospect Client before 10.0.2.119 on Windows, before 12.0.2.116 on OS X, and before 10.0.2.104 on Linux improperly generate password hashes, which makes it easier for remote attackers to bypass authentication and obtain access to backup files by leveraging a collision.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- VU#101500third-party-advisory
- http://www.retrospect.com/support/kb/cve_2015_2864
- 75201vdb-entry
- 1033948vdb-entry
- https://www.youtube.com/watch?v=MB8AL5u7JCA
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.