CVE-2018-15717
12.12.2018, 19:29
Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.Enginsight
| Vendor | Product | Version |
|---|---|---|
| opendental | opendental | 𝑥 < 18.4 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-916 - Use of Password Hash With Insufficient Computational EffortThe software generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.
- CWE-522 - Insufficiently Protected CredentialsThe product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.