CVE-2025-26485

A vulnerability in Beta80 Life 1st enables the retrieval of different error messages for failed authentication attempts in case of the usage of a wrong password or a non existent user. The difference in the returned error messages could be used by attackers to understand whether a certain user is...

PT-2025-11691

Name of the Vulnerable Software and Affected Versions Beta80 Life 1st Identity Manager version 1.5.2.14234 Description The issue allows user enumeration using authentication REST APIs. Different error messages are returned for failed authentication attempts, depending on whether a wrong password ...

PT-2025-11695

Name of the Vulnerable Software and Affected Versions Beta80 Life 1st version 1.5.2.14234 Description The issue involves the use of a broken or risky cryptographic algorithm, including the use of password hash with insufficient computational effort, use of weak hash, and use of a one-way hash wit...

CVE-2025-26486: Use of a Broken or Risky Cryptographic Algorithm

Broken or Risky Cryptographic Algorithm, Use of Password Hash With Insufficient Computational Effort, Use of Weak Hash, Use of a One-Way Hash with a Predictable Salt vulnerabilities in Beta80 "Life 1st Identity Manager" enable an attacker with access to password hashes to bruteforce user password...