CVE-2014-9578

Name of the Vulnerable Software and Affected Versions VDG Security SENSE (formerly DIVA) version 2.3.13

Description The issue allows remote attackers to gain login access by leveraging knowledge of a password hash, as the system performs authentication with a password hash instead of a password.

Recommendations For VDG Security SENSE (formerly DIVA) version 2.3.13, consider updating to a version that performs authentication with passwords instead of password hashes to prevent remote attackers from gaining login access by leveraging knowledge of a password hash. At the moment, there is no information about a newer version that contains a fix for this vulnerability.