CMSWing Weak Encryption Algorithm Vulnerability

CMSWing is a powerful e-commerce platform and CMS builder based on ThinkJS PC, mobile and WeChat public platform. A weak encryption algorithm vulnerability exists in the global.encryptPassword function of bootstrap/global.js in CMSWing 1.3.7, which can be exploited by an attacker to brute-force...

Design/Logic Flaw

The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus SDP 8012 and earlier uses a Caesar cipher for encryption of passwords in cookies, which makes it easier for remote attackers to obtain sensitive information by sniffing the network...

PT-2011-3176

Name of the Vulnerable Software and Affected Versions ManageEngine ServiceDesk Plus SDP versions 8012 and earlier Description The issue concerns the encryption of passwords in cookies. It is related to the encryptPassword function in Login.js, which uses a Caesar cipher for encryption. This makes...