Description (CNA)
Dozzle is a realtime log viewer for docker containers. Before version 8.5.3, the app uses sha-256 as the hash for passwords, which leaves users susceptible to rainbow table attacks. The app switches to bcrypt, a more appropriate hash for passwords, in version 8.5.3.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| amir20 / dozzle | affected < 8.5.3 |
CWE
CWE-328
References
- https://github.com/amir20/dozzle/security/advisories/GHSA-w7qr-q9fh-fj35
- https://github.com/amir20/dozzle/commit/de79f03aa3dbe5bb1e154a7e8d3dccbd229f3ea3
ADP enrichment
No English description supplied.
No references supplied.