CVE-2018-15681

An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is rehashed using a predictable salt and stored in the "pass" cookie, which is not flagged as HTTPOnly. Due to the weak and predictable salt that is in place, an attacker who successfully steals this cookie can efficiently brute-force it to retrieve the user's cleartext password.

An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is rehashed using a predictable salt and stored in the "pass" cookie, which is not flagged as HTTPOnly. Due to the weak and predictable salt that is in place, an attacker who successfully steals this cookie can efficiently brute-force it to retrieve the user's cleartext password.

Se ha descubierto un problema en BTITeam XBTIT 2.5.4. Cuando un usuario inicia sesión, su hash de contraseña se "rehashea" utilizando una sal predecible y almacenada en la cookie "pass", que lo está marcada como HTTPOnly. Debido a la sal débil y predecible que está en uso, un atacante que logre robar la cookie podrá realizar un ataque de fuerza bruta sobre ella para recuperar la contraseña del usuario en texto claro.