PT-2018-17673 · Ehcp · Easy Hosting Control Panel

Published 2018-05-11 · Updated 2018-06-13 · CVE-2018-6619

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Easy Hosting Control Panel (EHCP) version 0.37.12.b

Description The issue makes it easier for attackers to crack database passwords by leveraging the use of a weak hashing algorithm without a salt.

Recommendations For Easy Hosting Control Panel (EHCP) version 0.37.12.b, consider updating to a version that utilizes a stronger hashing algorithm with a salt to mitigate the risk of password cracking.

Exploit

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2018-6619

Affected Products

Easy Hosting Control Panel

References · 4

• 🔥 http://packetstormsecurity.com/files/147556/Easy-Hosting-Control-Panel-0.37.12.b-Insecure-Cryptography.html · Exploit
• 🔥 http://hyp3rlinx.altervista.org/advisories/EHCP-v0.37.12.b-INSECURE-CRYPTO.txt · Exploit
• https://osv.dev/vulnerability/CVE-2018-6619 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-6619 · Security Note