Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-465g-5cj6-wf64

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

EPSS

Процентиль: 33%
0.004
Низкий

8.8 High

CVSS3

Дефекты

CWE-326

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 9 лет назад

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

CVSS3: 6.8
redhat
около 10 лет назад

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

CVSS3: 8.8
nvd
больше 9 лет назад

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

CVSS3: 8.8
debian
больше 9 лет назад

The Mxit protocol uses weak encryption when encrypting user passwords, ...

EPSS

Процентиль: 33%
0.004
Низкий

8.8 High

CVSS3

Дефекты

CWE-326