Insecure Hashing Algorithm

🗓️ 26 Oct 2023 05:59:49Reported by Veracode Vulnerability DatabaseType

Crypto-js vulnerability to insecure sha1 hashing

Reporter	Title	Published	Views	Family All 64
IBM Security Bulletins	Security Bulletin: The IBM® Engineering Lifecycle Management is impacted by vulnerabilties in crypto-js version 3.1.2	10 Jan 202506:42	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access	2 Jun 202607:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace has addressed multiple vulnerabilities	27 Mar 202420:31	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Brix crypto-js affects IBM Process Mining CVE-2023-46233	15 Dec 202314:36	–	ibm
IBM Security Bulletins	Security Bulletin: crypto-js affects IBM Spectrum Control [CVE-2023-46233]	11 Dec 202308:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services November 2023 - Multiple CVEs addressed	12 Dec 202317:56	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in CloudPak for AIOPs [CVE-2023-46233]	18 Dec 202317:47	–	ibm
Circl	CVE-2023-46233	26 Oct 202300:39	–	circl
CNNVD	crypto-js encryption issue vulnerability	25 Oct 202300:00	–	cnnvd
CVE	CVE-2023-46233	25 Oct 202320:49	–	cve

Vulners

Node

crypto-js_project crypto-jsRangerelease-3.1.2–4.1.1js

Source	Link
github	www.github.com/brix/crypto-js/commit/421dd538b2d34e7c24a5b72cc64dc2b9167db40a
github	www.github.com/advisories/GHSA-xwcq-pm8m-c4vf
github	www.github.com/brix/crypto-js/security/advisories/GHSA-xwcq-pm8m-c4vf
lists	www.lists.debian.org/debian-lts-announce/2023/11/msg00025.html

27 Nov 2023 21:35Current

7High risk

Vulners AI Score7

CVSS 3.19.1

EPSS0.00916