CVE-2002-1657

PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack

High · published April 22, 2005

CVSS v3.1
7.5
EPSS
1%
Percentile
69.5
In the wild
Unconfirmed
What it is

PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01272 · 69.5th percentile
Published
2005-04-22T04:00Z
EPSS history
Timeline
  • 22 APR 04:00Z
    PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack
    cvelistv5