Weaknesses of type CWE-759

22 results

Uso de hash unidirecional sem salt

Quando você aplica uma função hash (como MD5 ou SHA-1) direto na senha ou dado sensível sem adicionar um salt (valor aleatório único), fica fácil quebrar com ataques de dicionário e rainbow tables. Um atacante que rouba o banco de dados consegue testar senhas pré-calculadas contra os hashes em segundos.

Example

Um sistema armazena senha como `hash = MD5(senha_usuario)`. Quando o banco vaza, um atacante usa uma tabela rainbow pré-computada com milhões de hashes MD5 e descobre a maioria das senhas em minutos, porque não há salt para tornar cada hash único.

How to mitigate

Use funções modernas de derivação de chave (bcrypt, Argon2, PBKDF2) que incluem salt automático e são computacionalmente caras, inviabilizando ataques em massa. Se já usa hash legado, migre para algo como bcrypt com cost factor adequado.

CVE-2023-1430MEDIUMFluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization ControlEPSS 0.8%CVE-2021-21253MEDIUMUse of a One-Way Hash without a Salt in OnlineVotingSystemEPSS 0.7%CVE-2020-16244—GE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of passwords, making it possible to decrypt passwords.EPSS 0.7%CVE-2020-25164MEDIUMB. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplusEPSS 0.6%CVE-2025-34208HIGHVasion Print (formerly PrinterLogic) Insecure Password HashingEPSS 0.4%CVE-2025-15544MEDIUMWeak Credential Protection During TP-Link Omada Device AdoptionEPSS 0.3%CVE-2026-9370MEDIUMulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable saltEPSS 0.3%CVE-2024-8453MEDIUMPLANET Technology switch devices - Weak hash for users' passwordsEPSS 0.3%CVE-2025-15631MEDIUMWeak Credential Storage in TP-Link Omada DevicesEPSS 0.3%CVE-2024-36440MEDIUMAn issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /etc/deviceconfig may recover the administEPSS 0.3%CVE-2023-33838MEDIUMIBM Security Verify Governance information disclosureEPSS 0.2%CVE-2025-10205HIGHPredictable Salt and Weak Hashing AlgorithmEPSS 0.2%CVE-2025-36253MEDIUMMultiple Vulnerabilities in IBM Concert Software.EPSS 0.2%CVE-2026-45027MEDIUMWeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.phpEPSS 0.2%CVE-2026-6217MEDIUMInformation Disclosure in Pik Online Software's PortalEPSS 0.2%CVE-2025-53884MEDIUMNeuVector has an insecure password storage vulnerable to rainbow attackEPSS 0.2%CVE-2025-36271MEDIUMIBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto componentEPSS 0.2%CVE-2025-27408MEDIUMManifest Uses a One-Way Hash without a SaltEPSS 0.2%CVE-2026-96552LOWsfturing hosp_order User Password MD5.java MD5.getMD5 hash without saltEPSS 0.2%CVE-2026-45787MEDIUMelecterm's encrypt method not safe enoughEPSS 0.1%