Description
Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing.
Scores
CVSS v3
9.8
EPSS
0.0036
EPSS Percentile
57.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-916
Status
published
Products (2)
arkeia/arkeia
4.2
arkeia/arkeia
4.2.8-2
Published
Aug 31, 2001
Tracked Since
Feb 18, 2026