CWE-916: Use of Password Hash With Insufficient Computational Effort, page 3

The product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.

What the weakness is: CWE-916 at MITRE. OWASP Top 10: A04:2025 Cryptographic Failures

1. 7.5CVE-2021-22774EPSS 0.8%2021-07-21

   A CWE-759: Use of a One-Way Hash without a Salt vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW2 / EVF2 / EV.2 all versions prior to R8 V3.4.0.1), and EVlink Smart Wallbox (…

2. 7.5CVE-2021-32519EPSS 0.9%2021-07-07

   Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been so…

3. 7.5CVE-2020-25754EPSS 1.4%2021-06-16

   An issue was discovered on Enphase Envoy R3.x and D4.x devices. There is a custom PAM module for user authentication that circumvents traditional user authentication. This module uses a password derived from the MD5 hash of the username an…

4. 6.7CVE-2021-22741EPSS 0.2%2021-05-26

   Use of Password Hash with Insufficient Computational Effort vulnerability exists in ClearSCADA (all versions), EcoStruxure Geo SCADA Expert 2019 (all versions), and EcoStruxure Geo SCADA Expert 2020 (V83.7742.1 and prior), which could caus…

5. 7.5CVE-2021-33563EPSS 0.8%2021-05-24

   Koel before 5.1.4 lacks login throttling, lacks a password strength policy, and shows whether a failed login attempt had a valid username. This might make brute-force attacks easier.

6. 7.8CVE-2019-20466EPSS 0.3%2021-04-02

   An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. A local attacker with the "default" account is capable of reading the /etc/passwd file, which contains a weakly hashed root password. By taking th…

7. 10.0CVE-2020-14516EPSS 4.2%2021-03-18

   In Rockwell Automation FactoryTalk Services Platform Versions 6.10.00 and 6.11.00, there is an issue with the implementation of the SHA-256 hashing algorithm with FactoryTalk Services Platform that prevents the user password from being has…

8. 7.5CVE-2020-28873EPSS 0.9%2021-03-17

   Fluxbb 1.5.11 is affected by a denial of service (DoS) vulnerability by sending an extremely long password via the user login form. When a long password is sent, the password hashing process will result in CPU and memory exhaustion on the …

9. 5.5CVE-2020-10538EPSS 0.3%2021-02-05

   An issue was discovered in Epikur before 20.1.1. It stores the secret passwords of the users as MD5 hashes in the database. MD5 can be brute-forced efficiently and should not be used for such purposes. Additionally, since no salt is used, …

10. 4.9CVE-2020-6780EPSS 0.6%2021-01-26

    Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other …

11. 5.3CVE-2021-21253EPSS 0.7%2021-01-21

    OnlineVotingSystem is an open source project hosted on GitHub. OnlineVotingSystem before version 1.1.2 hashes user passwords without a salt, which is vulnerable to dictionary attacks. Therefore there is a threat of security breach in the v…

12. 8.1CVE-2020-14389EPSS 0.8%2020-11-17

    It was found that Keycloak before version 12.0.0 would permit a user with only view-profile role to manage the resources in the new account console, allowing access and modification of data the user was not intended to have.

13. 4.4CVE-2020-27693EPSS 1.8%2020-11-09

    Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 stores administrative passwords using a hash that is considered outdated.

14. 7.5CVE-2019-9080EPSS 0.7%2020-10-20

    DomainMOD before 4.14.0 uses MD5 without a salt for password storage.

15. 7.5CVE-2020-14512EPSS 0.8%2020-08-25

    GateManager versions prior to 9.2c, The affected product uses a weak hash type, which may allow an attacker to view user passwords.

16. 5.5CVE-2020-10040EPSS 0.2%2020-07-14

    A vulnerability has been identified in SICAM MMU (All versions < V2.05), SICAM SGU (All versions), SICAM T (All versions < V2.18). An attacker with local access to the device might be able to retrieve some passwords in clear text.

17. 7.5CVE-2017-18917EPSS 0.7%2020-06-19

    An issue was discovered in Mattermost Server before 3.8.2, 3.7.5, and 3.6.7. Weak hashing was used for e-mail invitations, OAuth, and e-mail verification tokens.

18. 5.4CVE-2019-20575EPSS 0.1%2020-03-24

    An issue was discovered on Samsung mobile devices with P(9.0) software. The WPA3 handshake feature allows a downgrade or dictionary attack. The Samsung ID is SVE-2019-14204 (August 2019).

19. 7.5CVE-2014-2560ExploitEPSS 1.7%2020-02-12

    The PhonerLite phone before 2.15 provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP Digest Leak" issue.

20. 7.5CVE-2009-5139EPSS 0.4%2020-02-12

    The SIP implementation on the Gizmo5 software phone provides hashed credentials in a response to an invalid authentication challenge, which makes it easier for remote attackers to obtain access via a brute-force attack, related to a "SIP D…

21. 9.1CVE-2019-19735EPSS 0.8%2019-12-30

    class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes (based only on microtime), which allows an attacker to guess the hash and set the password within a few hours by brutef…

22. 7.5CVE-2019-20138EPSS 0.8%2019-12-30

    The HTTP Authentication library before 2019-12-27 for Nim has weak password hashing because the default algorithm for libsodium's crypto_pwhash_str is not used.

23. 7.5CVE-2019-19766EPSS 1.3%2019-12-12

    The Bitwarden server through 1.32.0 has a potentially unwanted KDF.

24. 5.5CVE-2014-0083EPSS 0.3%2019-11-21

    The Ruby net-ldap gem before 0.11 uses a weak salt when generating SSHA passwords.

25. 7.5CVE-2010-2450EPSS 1.2%2019-11-07

    The keygen.sh script in Shibboleth SP 2.0 (located in /usr/local/etc/shibboleth by default) uses OpenSSL to create a DES private key which is placed in sp-key.pm. It relies on the root umask (default 22) instead of chmoding the resulting f…

26. 9.8CVE-2019-17216EPSS 0.7%2019-10-06

    An issue was discovered on V-Zug Combi-Steam MSLQ devices before Ethernet R07 and before WLAN R05. Password authentication uses MD5 to hash passwords. Cracking is possible with minimal effort.

27. 5.3CVE-2019-12737EPSS 0.7%2019-10-02

    UserHashedTableAuth in JetBrains Ktor framework before 1.2.0-rc uses a One-Way Hash with a Predictable Salt for storing user credentials.

28. 9.8CVE-2019-6563EPSS 1.7%2019-03-05

    Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device.

29. 7.5CVE-2019-7649EPSS 0.9%2019-02-17

    global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing.

30. 7.5CVE-2019-3907EPSS 0.7%2019-01-18

    Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method (MD5 hash of a salt and password).

31. 7.2CVE-2019-0030EPSS 0.5%2019-01-15

    Juniper ATP uses DES and a hardcoded salt for password hashing, allowing for trivial de-hashing of the password file contents. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

32. 5.5CVE-2018-13811EPSS 0.2%2018-12-13

    A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) (All Versions < V15.1). Password hashes with insufficient computational effort could allow an attacker to access to a project file and reconstruct passwords. The vulnerabil…

33. 5.3CVE-2018-15717EPSS 0.5%2018-12-12

    Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.

34. 9.8CVE-2018-15681EPSS 0.8%2018-09-05

    An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is rehashed using a predictable salt and stored in the "pass" cookie, which is not flagged as HTTPOnly. Due to the weak and predictable salt that is i…

35. 9.8CVE-2018-15680EPSS 0.8%2018-09-05

    An issue was discovered in BTITeam XBTIT 2.5.4. The hashed passwords stored in the xbtit_users table are stored as unsalted MD5 hashes, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force atta…

36. 9.8CVE-2018-10618ExploitEPSS 10.0%2018-08-01

    Davolink DVW-3200N all version prior to Version 1.00.06. The device generates a weak password hash that is easily cracked, allowing a remote attacker to obtain the password for the device.

37. 9.8CVE-2017-3962EPSS 0.4%2018-06-12

    Password recovery exploitation vulnerability in the non-certificate-based authentication mechanism in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows attackers to crack user passwords via unsalted hashes.

38. 7.8CVE-2018-9233ExploitEPSS 1.7%2018-04-05

    Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\Sophos\Sophos Anti-Virus\Config\machine.xml, which makes it easier for attackers to determine a cleartext password, and subsequently choose u…

39. 8.1CVE-2018-1447EPSS 0.9%2018-04-04

    The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recove…

40. 5.9CVE-2017-11131EPSS 0.5%2017-08-01

    An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. For authentication, the user password is hashed directly with SHA-512 without a salt or another key-deri…

41. –CVE-2014-2354EPSS 0.7%2014-05-30

    Cogent DataHub before 7.3.5 does not use a salt during password hashing, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

42. 7.5CVE-2008-1526EPSS 0.9%2008-03-26

    ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), do not use a salt when calculating an MD5 password hash, which makes it easier for attackers to crack passwords.

43. 5.5CVE-2006-1058EPSS 0.3%2006-04-04

    BusyBox 1.1.1 does not use a salt when generating passwords, which makes it easier for local users to guess passwords from a stolen password file using techniques such as rainbow tables.

44. 9.8CVE-2005-0408ExploitEPSS 4.7%2005-02-14

    CitrusDB 0.3.6 and earlier generates easily predictable MD5 hashes of the user name for the id_hash cookie, which allows remote attackers to bypass authentication and gain privileges by calculating the MD5 checksum of the user name combine…

45. 7.5CVE-2002-1657EPSS 1.3%2002-12-31

    PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.

46. 9.8CVE-2001-0967EPSS 1.0%2001-08-31

    Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing.