PT-2018-14531 · Appgini · Bigprof Appgini

Published 2018-10-23 · Updated 2019-01-10 · CVE-2018-18587

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions BigProf AppGini version 5.70

Description The issue concerns the storage of passwords in the database using the MD5 hash, which is considered insecure.

Recommendations For BigProf AppGini version 5.70, consider updating the password storage mechanism to a more secure hashing algorithm. As a temporary workaround, restrict access to sensitive data and consider rehashing existing passwords with a stronger algorithm.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2018-18587

Affected Products

Bigprof Appgini

References · 3

• https://osv.dev/vulnerability/CVE-2018-18587 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-18587 · Security Note
• https://forums.appgini.com/phpbb/viewtopic.php?f=11&t=2592 · Note