CVE ID:	CVE-2008-4315
Description:	tog-pegasus in OpenGroup Pegasus 2.7.0 on Red Hat Enterprise Linux (RHEL) 5, Fedora 9, and Fedora 10 does not log failed authentication attempts to the OpenPegasus CIM server, which makes it easier for remote attackers to avoid detection of password guessing attacks.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-4315 1021281 http://www.securitytracker.com/id?1021281 32862 http://secunia.com/advisories/32862 50278 http://osvdb.org/50278 RHSA-2008:1001 http://www.redhat.com/support/errata/RHSA-2008-1001.html https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9 https://admin.fedoraproject.org/updates/tog-pegasus-2.7.0-7.fc9 https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10 https://admin.fedoraproject.org/updates/tog-pegasus-2.7.1-3.fc10 https://bugzilla.redhat.com/show_bug.cgi?id=472017 https://bugzilla.redhat.com/show_bug.cgi?id=472017 oval:org.mitre.oval:def:9431 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9431 togpegasus-systemlog-weak-security(46830) https://exchange.xforce.ibmcloud.com/vulnerabilities/46830