DomainMOD < 4.14.0 Multiple Vulnerabilities

DomainMOD is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:domainmod:domainmod"; if...

CVE-2019-9080

DomainMOD before 4.14.0 uses MD5 without a salt for password storage...

CVE-2019-9080

DomainMOD before 4.14.0 uses MD5 without a salt for password storage...

Design/Logic Flaw

DomainMOD before 4.14.0 uses MD5 without a salt for password storage...

CVE-2019-9080

DomainMOD vulnerable component: DomainMOD before 4.14.0. Root cause: password storage uses MD5 without a salt, leading to weak password hashing. Impact described as high in CVSS-3.1 (C:H, I:N, A:N) with network access and no user interaction required; offline password attacks are implied by unsal...

CVE-2019-9080

DomainMOD before 4.14.0 uses MD5 without a salt for password storage...

CVE-2019-9080: Use of Password Hash With Insufficient Computational Effort

DomainMOD before 4.14.0 uses MD5 without a salt for password storage...

Design/Logic Flaw

In EZCast Pro II, the administrator password md5 hash is provided upon a web request. This hash can be cracked to access the administration panel of the device...

CVE-2019-12305: Undefined Security Weakness

In EZCast Pro II, the administrator password md5 hash is provided upon a web request. This hash can be cracked to access the administration panel of the device...

CVE-2020-4778

IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156...

Design/Logic Flaw

IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156...

CVE-2020-4778

CVE-2020-4778 affects IBM Cúram Social Program Management, with vulnerable tokens hashed using MD5 in 7.0.9 and 7.0.10. Root cause: MD5 hashing of a token in a single instance, weaker than SHA-256 currently used in the app. Impact described by IBM: CVSS base score 5.9; confidentiality impact high...

CVE-2020-4778

IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156...

CVE-2020-4778: Use of a Broken or Risky Cryptographic Algorithm

IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156...

Security Bulletin: IBM Cúram Social Program Management uses MD5 algorithm (CVE-2020-4778)

Summary IBM Cúram Social Program Management uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. Vulnerability Details CVEID: CVE-2020-4778 DESCRIPTION: IBM Cúram Social Program Management use...

CVE-2020-4778

IBM Curam Social Program Management 7.0.9 and 7.0.10 uses MD5 algorithm for hashing token in a single instance which less safe than default SHA-256 cryptographic algorithm used throughout the Cúram application. IBM X-Force ID: 189156...

HTTP Request Injection

squid3 is vulnerable to HTTP Request Injection. The vulnerability exists through special characters in the decoded UserInfo, which is prepended in the absolute URLs, when it checks its cache to see if it can serve up a response on request by making a MD5 hash of the absolute URL of the request...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/mozilla-thunderbird-68.12.0-i686-1slack14.2.txz: Upgraded. This release contains security fixes and improvements. For mor...

Release Information for INFINIDAT Plug-In for Veeam Backup & Replication

This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing INFINIDAT Plug-In v1.2.6, ensure that you are running Veeam Backup & Replication...

OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Security. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...