Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-465g-5cj6-wf64

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

EPSS

Процентиль: 37%
0.00158
Низкий

8.8 High

CVSS3

Дефекты

CWE-326

Связанные уязвимости

CVSS3: 8.8
ubuntu
почти 9 лет назад

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

CVSS3: 6.8
redhat
больше 9 лет назад

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

CVSS3: 8.8
nvd
почти 9 лет назад

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

CVSS3: 8.8
debian
почти 9 лет назад

The Mxit protocol uses weak encryption when encrypting user passwords, ...

EPSS

Процентиль: 37%
0.00158
Низкий

8.8 High

CVSS3

Дефекты

CWE-326