CVE-2008-4905 Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack.
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| typosphere typo | <= 5.1.3 | No fix listed |
References
- 32272 broken-link third-party-advisory vendor-advisory
- 4550 broken-link third-party-advisory
- 20081031 Typo <= 5.1.3 Multiple Vulnerabilities broken-link mailing-list third-party-advisory vdb-entry