1. Home
  2. CVE Database
  3. CVE-2013-6805
MEDIUM · 5.0

CVE-2013-6805

OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to discover credentials by sniffing the network or (2) local users to discover crede...

Vulnerability Description

OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to discover credentials by sniffing the network or (2) local users to discover credentials by reading a .eod8 file.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:P/I:N/A:N
Confidentiality
PARTIAL
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
OpentextExceed Ondemand8.0

Related Weaknesses (CWE)

CWE-310

References

FAQ

What is CVE-2013-6805?

CVE-2013-6805 is a vulnerability with a CVSS score of 5.0 (MEDIUM). OpenText Exceed OnDemand (EoD) 8 uses weak encryption for passwords, which makes it easier for (1) remote attackers to discover credentials by sniffing the network or (2) local users to discover crede...

How severe is CVE-2013-6805?

CVE-2013-6805 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-6805?

Check the references section above for vendor advisories and patch information. Affected products include: Opentext Exceed Ondemand.