Vulnerabilities > CVE-2002-1657 - Use of Password Hash With Insufficient Computational Effort vulnerability in Postgresql 7.3.19

Summary

PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.

Vulnerable Configurations

Common Weakness Enumeration (CWE)

• CWE-916 - Use of Password Hash With Insufficient Computational Effort

References