PT-2018-14531
CVE-2018-18587
·
تاريخ النشر
2018-10-23
·
تاريخ التحديث
2019-01-10
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
BigProf AppGini version 5.70
Description
The issue concerns the storage of passwords in the database using the MD5 hash, which is considered insecure.
Recommendations
For BigProf AppGini version 5.70, consider updating the password storage mechanism to a more secure hashing algorithm. As a temporary workaround, restrict access to sensitive data and consider rehashing existing passwords with a stronger algorithm.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾