CMSWing Weak Encryption Algorithm Vulnerability

CMSWing is a powerful e-commerce platform and CMS builder based on ThinkJS PC, mobile and WeChat public platform. A weak encryption algorithm vulnerability exists in the global.encryptPassword function of bootstrap/global.js in CMSWing 1.3.7, which can be exploited by an attacker to brute-force...

Design/Logic Flaw

The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus SDP 8012 and earlier uses a Caesar cipher for encryption of passwords in cookies, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...