CVE-2021-21253

OnlineVotingSystem is an open source project hosted on GitHub. OnlineVotingSystem before version 1.1.2 hashes user passwords without a salt, which is vulnerable to dictionary attacks. Therefore there is a threat of security breach in the voting system. Without a salt, it is much easier for attackers to pre-compute the hash value using dictionary attack techniques such as rainbow tables to crack passwords. This problem is fixed and published in version 1.1.2. A long randomly generated salt is added to the password hash function to better protect passwords stored in the voting system.

OnlineVotingSystem is an open source project hosted on GitHub. OnlineVotingSystem before version 1.1.2 hashes user passwords without a salt, which is vulnerable to dictionary attacks. Therefore there is a threat of security breach in the voting system. Without a salt, it is much easier for attackers to pre-compute the hash value using dictionary attack techniques such as rainbow tables to crack passwords. This problem is fixed and published in version 1.1.2. A long randomly generated salt is added to the password hash function to better protect passwords stored in the voting system.

OnlineVotingSystem es un proyecto de código abierto alojado en GitHub. OnlineVotingSystem anterior a versión 1.1.2, aplica un hash a las contraseñas de los usuarios sin sal, lo que es vulnerable a ataques de diccionario. Por lo tanto, se presenta una amenaza de violación de seguridad en el sistema de votación. Sin una sal, es mucho más fácil para los atacantes calcular previamente el valor hash usando técnicas de ataque de diccionario como tablas rainbow para descifrar contraseñas. Este problema está corregido y publicado en la versión 1.1.2. Se agrega una sal generada aleatoriamente a la función password hash para proteger mejor las contraseñas almacenadas en el sistema de votación