CVE-2022-37164

creationtimestamp| type| source ---|---|--- 2022-09-08 20:15:21+00:00| seen| https://t.me/cibsecurity/49465...

CVE-2022-37164

CVE-2022-37164 affects Inoda OnTrack version 3.4. The issue is a weak password policy that enables brute-force access and password hashes stored without salt or pepper, making cracking with tools like hashcat feasible. This combination creates a risk of unauthorized access to the application. The...