CVE-2019-10855

Computrols CBAS 18.0.0 mishandles password hashes

published May 23, 2019

CVSS
—
EPSS
1%
Percentile
62.4
In the wild
Unconfirmed
What it is

Computrols CBAS 18.0.0 mishandles password hashes. The approach is MD5 with a pw prefix, e.g., if the password is admin, it will calculate the MD5 hash of pwadmin and store it in a MySQL database.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00998 · 62.4th percentile
Published
2019-05-23T18:43Z
EPSS history
Timeline
  • 23 MAY 18:43Z
    Computrols CBAS 18.0.0 mishandles password hashes
    cvelistv5