CVE-2018-15680

An issue was discovered in BTITeam XBTIT 2.5.4. The hashed passwords stored in the xbtit_users table are stored as unsalted MD5 hashes, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack.

An issue was discovered in BTITeam XBTIT 2.5.4. The hashed passwords stored in the xbtit_users table are stored as unsalted MD5 hashes, which makes it easier for context-dependent attackers to obtain cleartext values via a brute-force attack.

Se ha descubierto un problema en BTITeam XBTIT 2.5.4. Las contraseñas hasheadas almacenadas en la tabla xbtit_users se almacenan como hashes MD5 sin sal, lo que facilita que los atacantes dependientes del contexto obtengan valores en texto claro mediante un ataque de fuerza bruta.