← CVE Intelligence

CVE-2025-2265

Santesoft Sante PACS Server HTTP.db SHA1 Hash Truncation PUBLISHED

Description (CNA)

The password of a web user in "Sante PACS Server.exe" is zero-padded to 0x2000 bytes, SHA1-hashed, base64-encoded, and stored in the USER table in the SQLite database HTTP.db. However, the number of hash bytes encoded and stored is truncated if the hash contains a zero byte

Affected (CNA)

Vendor / productVersions
Santesoft / Sante PACS Serveraffected 4.1.0; unaffected 4.2.0

CWE

CWE-916

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.