Every CVE Search/ Get API key

CVE-2013-6445

Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based...

5.0 MediumFix available

Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via a brute-force attack.

Exploit likelihood

1.15%Up 0.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via a brute-force attack.

Record
CVE-2013-6445
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Weakness
CWE-310
Updated
2026-11-02
CVE List No score

Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via a brute-force attack.

Record
CVE-2013-6445
Updated
2026-11-02
EUVDEUVD-2013-6252 No score

Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via a brute-force attack.

Record
EUVD-2013-6252
Updated
2026-11-03
GitHub AdvisoriesGHSA-8v63-g483-vrxj No score

Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based...

Cumin (aka MRG Management Console), as used in Red Hat Enterprise MRG 2.5, uses the DES-based crypt function to hash passwords, which makes it easier for attackers to obtain sensitive information via a brute-force attack.

Record
GHSA-8v63-g483-vrxj
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
condor
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
condor-classads
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
condor-debuginfo
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
condor-kbdd
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
condor-qmf
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
condor-vm-gahp
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
mrg-release
Red Hat:enterprise_mrg:2:computenode:el6
From an advisory covering 2 CVEs
 before 0:2.5.0-1.el6
0:2.5.0-1.el6
condor
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
condor-aviary
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
condor-classads
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
Show 14 moreShow less
Affected packages
PackageAffectedFixed
condor-cluster-resource-agent
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
condor-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
condor-deltacloud-gahp
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
condor-kbdd
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
condor-plumage
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
condor-qmf
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
condor-vm-gahp
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:7.8.10-0.1.el6
0:7.8.10-0.1.el6
cumin
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:0.1.5797-1.el6
0:0.1.5797-1.el6
mongodb
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:1.6.4-7.el6
0:1.6.4-7.el6
mongodb-debuginfo
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:1.6.4-7.el6
0:1.6.4-7.el6
mongodb-server
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:1.6.4-7.el6
0:1.6.4-7.el6
mrg-release
Red Hat:enterprise_mrg:2:server:el6
From an advisory covering 2 CVEs
 before 0:2.5.0-1.el6
0:2.5.0-1.el6
cumin
Red Hat:enterprise_mrg:2::el5
 before 0:0.1.5796-2.el5_9
0:0.1.5796-2.el5_9
mrg-release
Red Hat:enterprise_mrg:2::el5
 before 0:2.5.0-1.el5
0:2.5.0-1.el5

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2013-6445 is a medium vulnerability (CVSS 5.0) in Redhat Enterprise Mrg, published April 30, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.15%, the 66th percentile. Fixed in cumin 0:0.1.5796-2.el5_9.

References

Show 20 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open