7.5
CVE-2017-16632
- EPSS 0.69%
- Veröffentlicht 11.08.2021 21:15:07
- Zuletzt bearbeitet 21.11.2024 03:16:43
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginIn SapphireIMS 4097_1, the password in the database is stored in Base64 format.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sapphireims ≫ Sapphireims Version4097_1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.69% | 0.479 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-326 Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
https://vuln.shellcoder.party/tags/sapphireims/
https://vuln.shellcoder.party/2020/07/18/cve-2017-16632-sapphireims-insecure-storage-of-password/