Dozzle is a realtime log viewer for docker containers. Before version 8.5.3, the app uses sha-256 as the hash for passwords, which leaves users susceptible to rainbow table attacks. The app switches to bcrypt, a more appropriate hash for passwords, in version 8.5.3.
History

Fri, 04 Oct 2024 19:00:00 +0000

Type Values Removed Values Added
First Time appeared Amirraminfar
Amirraminfar dozzle
Weaknesses CWE-326
CPEs cpe:2.3:a:amirraminfar:dozzle:*:*:*:*:*:docker:*:*
Vendors & Products Amirraminfar
Amirraminfar dozzle

Fri, 27 Sep 2024 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 27 Sep 2024 14:15:00 +0000

Type Values Removed Values Added
Description Dozzle is a realtime log viewer for docker containers. Before version 8.5.3, the app uses sha-256 as the hash for passwords, which leaves users susceptible to rainbow table attacks. The app switches to bcrypt, a more appropriate hash for passwords, in version 8.5.3.
Title Dozzle uses unsafe hash for passwords
Weaknesses CWE-328
References
Metrics cvssV3_1

{'score': 4.8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N'}


cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2024-09-27T13:58:22.881Z

Updated: 2024-09-27T14:13:09.811Z

Reserved: 2024-09-19T22:32:11.963Z

Link: CVE-2024-47182

cve-icon Vulnrichment

Updated: 2024-09-27T14:13:05.679Z

cve-icon NVD

Status : Analyzed

Published: 2024-09-27T14:15:04.620

Modified: 2024-10-04T18:31:29.027

Link: CVE-2024-47182

cve-icon Redhat

No data.