Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-f8qp-g632-x6w9

Опубликовано: 09 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Bminusl IHateToBudget v1.5.7 employs a weak password policy which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. Additionally, user passwords are hashed without a salt or pepper making it much easier for tools like hashcat to crack the hashes.

Bminusl IHateToBudget v1.5.7 employs a weak password policy which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. Additionally, user passwords are hashed without a salt or pepper making it much easier for tools like hashcat to crack the hashes.

EPSS

Процентиль: 37%
0.00161
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-521

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

Bminusl IHateToBudget v1.5.7 employs a weak password policy which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. Additionally, user passwords are hashed without a salt or pepper making it much easier for tools like hashcat to crack the hashes.

EPSS

Процентиль: 37%
0.00161
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-521