Description (CNA)
Bludit uses the SHA-1 hashing algorithm to compute password hashes. Thus, attackers could determine cleartext passwords with brute-force attacks due to the inherent speed of SHA-1. In addition, the salt that is computed by Bludit is generated with a non-cryptographically secure function.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Bludit / Bludit | affected 2.0 |
CWE
CWE-916
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.