PT-2018-14531 · Appgini · Bigprof Appgini

Publicado 2018-10-23 · Atualizado 2019-01-10 · CVE-2018-18587

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions BigProf AppGini version 5.70

Description The issue concerns the storage of passwords in the database using the MD5 hash, which is considered insecure.

Recommendations For BigProf AppGini version 5.70, consider updating the password storage mechanism to a more secure hashing algorithm. As a temporary workaround, restrict access to sensitive data and consider rehashing existing passwords with a stronger algorithm.

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

Identificadores relacionados

CVE-2018-18587

Produtos afetados

Bigprof Appgini

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-18587 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-18587 · Nota de Segurança
• https://forums.appgini.com/phpbb/viewtopic.php?f=11&t=2592 · Nota