9.8
CVSSv3

CVE-2001-0967

Published: 31/08/2001 Updated: 14/02/2024
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an malicious user to conduct brute force password guessing.

Vulnerable Product Search on Vulmon Subscribe to Product

arkeia arkeia 4.2.8-2

arkeia arkeia 4.2