CVE-2020-10538

An issue was discovered in Epikur before 20.1.1

published February 5, 2021

CVSS
—
EPSS
0%
Percentile
16.9
In the wild
Unconfirmed
What it is

An issue was discovered in Epikur before 20.1.1. It stores the secret passwords of the users as MD5 hashes in the database. MD5 can be brute-forced efficiently and should not be used for such purposes. Additionally, since no salt is used, rainbow tables can speed up the attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00260 · 16.9th percentile
Published
2021-02-05T09:18Z
EPSS history
Timeline
  • 05 FEB 09:18Z
    An issue was discovered in Epikur before 20.1.1
    cvelistv5