Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4qqf-xjmf-3h2v

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash.

Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash.

EPSS

Процентиль: 29%
0.00102
Низкий

Дефекты

CWE-916

Связанные уязвимости

CVSS3: 9.8
nvd
больше 4 лет назад

Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.2, QSAN XEVO v2.1.0, and QSAN SANOS v2.1.0.

EPSS

Процентиль: 29%
0.00102
Низкий

Дефекты

CWE-916