CWE-916
Use of Password Hash With Insufficient Computational Effort
Parent: CWE-328 - Use of Weak Hash
The product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.
115 vulnerabilities with CWE-916
CVE-2020-14516
CRITICAL
Rockwell Automation FactoryTalk Services Platform <6.11.00 - Info D...
CVSS 10.0
CVE-2020-28873
HIGH
Fluxbb 1.5.11 - Denial of Service via Long Password Input
CVSS 7.5
CVE-2020-10538
MEDIUM
epikur < 20.1.1 - Insecure Password Storage via Unsalted MD5 Hashes
CVSS 5.5
CVE-2020-6780
MEDIUM
Bosch FSM-2500/FSM-5000 <5.2 - Info Disclosure
CVSS 4.4
CVE-2020-14389
HIGH
Keycloak <12.0.0 - Privilege Escalation
CVSS 8.1
CVE-2020-27693
MEDIUM
Trend Micro IMSVA 9.1 - Info Disclosure
CVSS 4.4
CVE-2020-14512
HIGH
GateManager <9.2c - Info Disclosure
CVSS 8.1
CVE-2020-10040
MEDIUM
SICAM MMU < 2.05, SGU, T < 2.18 - Password Hash Weakness
CVSS 5.5
CVE-2019-20466
HIGH
Sannce Smart HD Wifi Security Camera - Info Disclosure
CVSS 7.8
CVE-2019-9080
HIGH
DomainMOD <4.14.0 - Info Disclosure
CVSS 7.5
CVE-2019-20575
MEDIUM
Android - WPA3 Handshake Downgrade and Dictionary Attack
CVSS 5.4
CVE-2019-19735
CRITICAL
MFScripts YetiShare <4.5.3 - Info Disclosure
CVSS 9.1
CVE-2019-20138
HIGH
Nim HTTP Auth <2019-12-27 - Info Disclosure
CVSS 7.5
CVE-2019-19766
HIGH
Bitwarden <1.32.0 - Info Disclosure
CVSS 7.5
CVE-2019-17216
CRITICAL
V-Zug Combi-Steam MSLQ <Ethernet R07 & WLAN R05 - Info Disclosure
CVSS 9.8
CVE-2019-12737
MEDIUM
JetBrains Ktor <1.2.0-rc - Info Disclosure
CVSS 5.3
CVE-2019-6563
CRITICAL
Moxa IKS-G6824A Firmware < 4.5 and EDS-405A/408A/510A Firmware < 3.8 - Predictable Cookie Generation via MD5 Hash
CVSS 9.8
CVE-2019-7649
HIGH
CMSWing 1.3.7 - Use of Password Hash With Insufficient Computational Effort
CVSS 7.5
CVE-2019-3907
HIGH
Premisys Identicard <3.1.190 - Info Disclosure
CVSS 7.5
CVE-2019-0030
HIGH
Juniper ATP <5.0.3 - Info Disclosure
CVSS 7.2
CVE-2018-13811
MEDIUM
SIMATIC STEP 7 (TIA Portal) < V15.1 - Sensitive Information Exposure via Weak Password Hash
CVSS 5.5
CVE-2018-15717
MEDIUM
Open Dental <18.4 - Info Disclosure
CVSS 5.3
CVE-2018-15681
CRITICAL
BTITeam XBTIT <2.5.4 - Info Disclosure
CVSS 9.8
CVE-2018-15680
CRITICAL
BTITeam XBTIT <2.5.4 - Info Disclosure
CVSS 9.8
CVE-2018-10618
CRITICAL
Davolink DVW-3200N <1.00.06 - Info Disclosure
CVSS 9.8
Details
Vulnerabilities
115