Описание
Bloxx Web Filtering before 5.0.14 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach.
Ссылки
- US Government Resource
- US Government Resource
- US Government Resource
- US Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 5.0.13 (включая)
cpe:2.3:a:bloxx:web_filtering:*:*:*:*:*:*:*:*
EPSS
Процентиль: 82%
0.0176
Низкий
5.8 Medium
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
больше 3 лет назад
Bloxx Web Filtering before 5.0.14 does not use a salt during calculation of a password hash, which makes it easier for context-dependent attackers to determine cleartext passwords via a rainbow-table approach.
EPSS
Процентиль: 82%
0.0176
Низкий
5.8 Medium
CVSS2
Дефекты
CWE-264