CWE-760: Use of a One-Way Hash with a Predictable Salt
The product uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product uses a predictable salt as part of the input.
A kind of CWE-916 Use of Password Hash With Insufficient Computational Effort.
From the CWE List. © The MITRE Corporation.
Newest
- paicni cfnext CFNext before 3.1.0 Admin Password Recovery via MD5-Derived Subscription UUID 7.7 High
- team-alembic ash authentication Reversible IP address pseudonymisation in AshAuthentication audit log hash mode 1.8 Low
- siemens sinec ins A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected... 5.0 Medium
- ulisesbocchio jasypt-spring-boot ulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable salt 6.3 Medium
- tp-link omada controller, beam bridge 5 ur firmware, dr3220v-4g firmware +83 more +85 more Authentication Weakness on Omada Controllers, Gateways and Access Points 6.0 Medium
- abb aspect-enterprise, matrix series, nexus series +2 more One way hash with predictable salt 6.1 Medium
- beta80 life 1st Use of a Broken or Risky Cryptographic Algorithm, Use of Password Hash With Insufficient... 6.0 Medium
- horizoncloud caterease An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly... 7.5 High
- inhand networks inrouter 302, inrouter 615, inhandnetworks inrouter302 firmware +1 more +3 more InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version... 7.0 High
- redux.io gutenberg template library & redux framework, redux gutenberg template library \& redux framework +1 more Gutenberg Template Library & Redux Framework <= 4.2.11 Sensitive Information Disclosure 5.3 Medium
- schneider-electric modicon m221 firmware A CWE-760: Use of a One-Way Hash with a Predictable Salt vulnerability exists in Modicon M221 ... 5.5 Medium
- docutrac dtisqlinstaller.exe, docutracinc dtisqlinstaller +1 more DocuTrac DTISQLInstaller.exe Hard-Coded Salt 2.9 Low