Inadequate Encryption Strength in showdoc · CVE-2021-3680 · GitHub Advisory Database · GitHub

Inadequate Encryption Strength in showdoc

Moderate severity GitHub Reviewed Published Sep 1, 2021 to the GitHub Advisory Database • Updated Jan 29, 2023

Package

showdoc/showdoc (Composer)

Affected versions

<= 2.9.8

Patched versions

None

Description

showdoc makes use of a hardcoded salt in its user password hash function

References

Published by the National Vulnerability Database

Aug 4, 2021

Reviewed Aug 30, 2021

Published to the GitHub Advisory Database Sep 1, 2021

Last updated Jan 29, 2023

Severity

Moderate

4.9

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

High

User interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N