Description
PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.
Remediation
References
Related Vulnerabilities
Moodle Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2021-36400)
WordPress Plugin DS.DownloadList PHP Object Injection (1.2)
WordPress Plugin Lazyest Gallery EXIF Code Cross-Site Scripting (1.1.20)
Jenkins Improper Input Validation Vulnerability (CVE-2017-1000394)
WordPress Plugin Auto Affiliate Links Multiple SQL Injection Vulnerabilities (4.9.9.4)