Weaknesses of type CWE-759

23 results

Uso de hash unidirecional sem salt

Quando você aplica uma função hash (como MD5 ou SHA-1) direto na senha ou dado sensível sem adicionar um salt (valor aleatório único), fica fácil quebrar com ataques de dicionário e rainbow tables. Um atacante que rouba o banco de dados consegue testar senhas pré-calculadas contra os hashes em segundos.

Example

Um sistema armazena senha como `hash = MD5(senha_usuario)`. Quando o banco vaza, um atacante usa uma tabela rainbow pré-computada com milhões de hashes MD5 e descobre a maioria das senhas em minutos, porque não há salt para tornar cada hash único.

How to mitigate

Use funções modernas de derivação de chave (bcrypt, Argon2, PBKDF2) que incluem salt automático e são computacionalmente caras, inviabilizando ataques em massa. Se já usa hash legado, migre para algo como bcrypt com cost factor adequado.

CVE-2023-1430MEDIUMFluentCRM - Marketing Automation For WordPress <= 2.8.01 - Insufficient Use of Hash as Authorization ControlEPSS 0.8%CVE-2021-21253MEDIUMUse of a One-Way Hash without a Salt in OnlineVotingSystemEPSS 0.7%CVE-2020-16244—GE Digital APM Classic, Versions 4.4 and prior. Salt is not used for hash calculation of passwords, making it possible to decrypt passwords.EPSS 0.7%CVE-2020-25164MEDIUMB. Braun SpaceCom, Battery Pack SP with Wi-Fi, and Data module compactplusEPSS 0.6%CVE-2025-34208HIGHVasion Print (formerly PrinterLogic) Insecure Password HashingEPSS 0.4%CVE-2025-15544MEDIUMWeak Credential Protection During TP-Link Omada Device AdoptionEPSS 0.3%CVE-2024-8453MEDIUMPLANET Technology switch devices - Weak hash for users' passwordsEPSS 0.3%CVE-2025-15631MEDIUMWeak Credential Storage in TP-Link Omada DevicesEPSS 0.3%CVE-2024-36440MEDIUMAn issue was discovered on Swissphone DiCal-RED 4009 devices. An attacker with access to the file /etc/deviceconfig may recover the administEPSS 0.3%CVE-2023-33838MEDIUMIBM Security Verify Governance information disclosureEPSS 0.2%CVE-2026-96552LOWsfturing hosp_order User Password MD5.java MD5.getMD5 hash without saltEPSS 0.2%CVE-2025-36253MEDIUMMultiple Vulnerabilities in IBM Concert Software.EPSS 0.2%CVE-2025-10205HIGHPredictable Salt and Weak Hashing AlgorithmEPSS 0.2%CVE-2025-36271MEDIUMIBM Integrated Analytics System (IIAS) is affected by a predictable salt vulnerability in Magneto componentEPSS 0.2%CVE-2026-9370MEDIUMulisesbocchio jasypt-spring-boot Password Hash SimpleGCMConfig.java getSecretKeySaltGenerator hash predictable saltEPSS 0.2%CVE-2026-13576HIGHCallBackery versions before 0.62.0 for Perl store user passwords as unsalted HMAC-SHA1 hashesEPSS 0.2%CVE-2026-6217MEDIUMInformation Disclosure in Pik Online Software's PortalEPSS 0.2%CVE-2025-53884MEDIUMNeuVector has an insecure password storage vulnerable to rainbow attackEPSS 0.2%CVE-2026-45027MEDIUMWeGIA: Use of Weak Password Hashing Algorithm (SHA-256, no salt) in html/login.phpEPSS 0.2%CVE-2025-27408MEDIUMManifest Uses a One-Way Hash without a SaltEPSS 0.2%