CVE-2021-25839

Name of the Vulnerable Software and Affected Versions MintHCM version 3.0.8

Description A weak password requirement vulnerability exists in the Create New User function, which could lead an attacker to easier password brute-forcing.

Recommendations For MintHCM version 3.0.8, consider implementing stronger password requirements to mitigate the risk of brute-forcing attacks. As a temporary workaround, restrict access to the Create New User function until a more secure password policy can be enforced.