Description

Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier.

Remediation

References

CVE-2017-7888

Related Vulnerabilities

WeBid Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-35409)

WordPress Plugin Gutenberg & Elementor Templates Importer For Responsive Security Bypass (2.2.5)

Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-1814)

WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.8)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-0798)

Severity

Critical

Classification

CVE-2017-7888 CWE-326 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities