CVE-2024-24553
Bludit uses SHA1 as Password Hashing Algorithm
Summary
Bludit uses SHA1 as Password Hashing Algorithm
Original description
The description as published by the source.
Bludit uses the SHA-1 hashing algorithm to compute password hashes. Thus, attackers could determine cleartext passwords with brute-force attacks due to the inherent speed of SHA-1. In addition, the salt that is computed by Bludit is generated with a non-cryptographically secure function.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory redguard.ch
- web github.com
- web bludit.com