← voltar
CVE-2026-25607

Weak password encoding in STER

CVSS 5.7 MEDIUMEPSS 0.1%CWE-261
Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after analyzing how passwords with known values are encoded. This issue was fixed in version 9.5.
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Centralny Instytut Ochrony Pracy - Państwowy Instytut Badawczy · STER

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://cert.pl/posts/2026/05/CVE-2026-25606https://www.ciop.pl/CIOPPortalWAR/appmanager/ciop/pl?_nfpb=true&_pageLabel=P52000165211572544981480