Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v6vv-xh62-w9gv

Опубликовано: 09 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Inoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. Additionally, user passwords are hashed without a salt or pepper making it much easier for tools like hashcat to crack the hashes.

Inoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. Additionally, user passwords are hashed without a salt or pepper making it much easier for tools like hashcat to crack the hashes.

EPSS

Процентиль: 45%
0.00229
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-521

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

Inoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. Additionally, user passwords are hashed without a salt or pepper making it much easier for tools like hashcat to crack the hashes.

EPSS

Процентиль: 45%
0.00229
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-521