CVE-2025-26486CWE-327CWE-328CWE-760CWE-916

Broken or Risky Cryptographic Algorithm, Use of Password Hash With Insufficient Computational Effort, Use of Weak Hash, Use of a One-Way Hash with a…

Medium · published March 19, 2025

CVSS v3.1
6.0
EPSS
0%
Percentile
1.7
In the wild
Unconfirmed
What it is

Broken or Risky Cryptographic Algorithm, Use of Password Hash

With Insufficient Computational Effort, Use of Weak Hash, Use of a

One-Way Hash with a Predictable Salt vulnerabilities in Beta80 "Life 1st Identity Manager"

enable an attacker with access to

password hashes

to bruteforce user passwords or find a collision to ultimately while attempting to gain access to a target application that uses "Life 1st Identity Manager" as a service for authentication.

This issue affects Life 1st: 1.5.2.14234.

The record
Technical detail
CVSS v3.1
6.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00120 · 1.7th percentile
Weaknesses
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm; CWE-328 · Use of Weak Hash; CWE-760 · Use of a One-Way Hash with a Predictable Salt; CWE-916 · Use of Password Hash With Insufficient Computational Effort
Published
2025-03-19T15:46Z
EPSS history
Timeline
  • 19 MAR 15:46Z
    Broken or Risky Cryptographic Algorithm, Use of Password Hash With Insufficient Computational Effort, Use of Weak Hash, Use of a One-Way Hash with a…
    cvelistv5