PT-2018-17673 · Ehcp · Easy Hosting Control Panel

Publicado 2018-05-11 · Atualizado 2018-06-13 · CVE-2018-6619

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Easy Hosting Control Panel (EHCP) version 0.37.12.b

Description The issue makes it easier for attackers to crack database passwords by leveraging the use of a weak hashing algorithm without a salt.

Recommendations For Easy Hosting Control Panel (EHCP) version 0.37.12.b, consider updating to a version that utilizes a stronger hashing algorithm with a salt to mitigate the risk of password cracking.

Exploit

Correção

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-327

Identificadores relacionados

CVE-2018-6619

Produtos afetados

Easy Hosting Control Panel

Referências · 4

• 🔥 http://packetstormsecurity.com/files/147556/Easy-Hosting-Control-Panel-0.37.12.b-Insecure-Cryptography.html · Exploit
• 🔥 http://hyp3rlinx.altervista.org/advisories/EHCP-v0.37.12.b-INSECURE-CRYPTO.txt · Exploit
• https://osv.dev/vulnerability/CVE-2018-6619 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6619 · Nota de Segurança