PT-2018-14531
CVE-2018-18587
·
Published
2018-10-23
·
Updated
2019-01-10
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
BigProf AppGini version 5.70
Description
The issue concerns the storage of passwords in the database using the MD5 hash, which is considered insecure.
Recommendations
For BigProf AppGini version 5.70, consider updating the password storage mechanism to a more secure hashing algorithm. As a temporary workaround, restrict access to sensitive data and consider rehashing existing passwords with a stronger algorithm.
Found an issue in the description? Have something to add? Feel free to write us 👾