CVE-2019-0030CWE-327

Juniper ATP: Password hashing uses DES and a hardcoded salt

Medium · published January 15, 2019

CVSS v3.0
6.7
EPSS
1%
Percentile
44.2
In the wild
Unconfirmed
What it is

Juniper ATP uses DES and a hardcoded salt for password hashing, allowing for trivial de-hashing of the password file contents. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

The record
Technical detail
CVSS v3.0
6.7 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00534 · 44.2th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2019-01-15T21:00Z
EPSS history
Timeline
  • 15 JAN 21:00Z
    Juniper ATP: Password hashing uses DES and a hardcoded salt
    cvelistv5