CVE-2024-24553
Bludit uses SHA1 as Password Hashing Algorithm
Résumé
Bludit uses SHA1 as Password Hashing Algorithm
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Bludit uses the SHA-1 hashing algorithm to compute password hashes. Thus, attackers could determine cleartext passwords with brute-force attacks due to the inherent speed of SHA-1. In addition, the salt that is computed by Bludit is generated with a non-cryptographically secure function.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory redguard.ch
- web github.com
- web bludit.com