An issue was discovered in Epikur before 20.1.1. It stores the secret passwords of the users as MD5 hashes in the database. MD5 can be brute-forced efficiently and should not be used for such purposes. Additionally, since no salt is used, rainbow tables can speed up the attack.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2021-02-05T09:18:55

Updated: 2024-08-04T11:06:09.534Z

Reserved: 2020-03-13T00:00:00

Link: CVE-2020-10538

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-02-05T14:15:15.310

Modified: 2024-11-21T04:55:32.383

Link: CVE-2020-10538

cve-icon Redhat

No data.