PYSEC-2022-247

Flask-AppBuilder is an application development framework built on top of Flask python framework. In versions prior to 4.1.3 an authenticated Admin user could query other users by their salted and hashed passwords strings. These filters could be made by using partial hashed password strings. The...

CVE-2022-31177: Exposure of Sensitive Information to an Unauthorized Actor

Flask-AppBuilder is an application development framework built on top of Flask python framework. In versions prior to 4.1.3 an authenticated Admin user could query other users by their salted and hashed passwords strings. These filters could be made by using partial hashed password strings. The...

PT-2018-4105

Name of the Vulnerable Software and Affected Versions IBM Endpoint Manager for Remote Control versions 9.0.0 through 9.0.1 Tivoli Remote Control version 5.1.2 Description The issue allows remote attackers to more easily decrypt passwords by leveraging access to stored hashes of partial passwords...