Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5vfc-fcp9-h5q8

Опубликовано: 30 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

Certain switch models from PLANET Technology use an insecure hashing function to hash user passwords without being salted. Remote attackers with administrator privileges can read configuration files to obtain the hash values, and potentially crack them to retrieve the plaintext passwords.

Certain switch models from PLANET Technology use an insecure hashing function to hash user passwords without being salted. Remote attackers with administrator privileges can read configuration files to obtain the hash values, and potentially crack them to retrieve the plaintext passwords.

EPSS

Процентиль: 28%
0.00102
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-328

Связанные уязвимости

CVSS3: 4.9
nvd
больше 1 года назад

Certain switch models from PLANET Technology use an insecure hashing function to hash user passwords without being salted. Remote attackers with administrator privileges can read configuration files to obtain the hash values, and potentially crack them to retrieve the plaintext passwords.

EPSS

Процентиль: 28%
0.00102
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-328