Описание
NeuVector stores user passwords and API keys using a simple, unsalted hash. This method is vulnerable to rainbow table attack (offline attack where hashes of known passwords are precomputed).
EPSS
Процентиль: 4%
0.00019
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-759
Связанные уязвимости
CVSS3: 5.3
github
5 месяцев назад
NeuVector has an insecure password storage vulnerable to rainbow attack
EPSS
Процентиль: 4%
0.00019
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-759