Vulnerabilities > CVE-2009-2951 - Cryptographic Issues vulnerability in Phenotype-Cms Phenotype CMS

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

phenotype-cms

CWE-310

NVD

Published: 2009-08-24

Updated: 2024-11-21

Summary

Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers to determine cleartext passwords.

Vulnerable Configurations

Part	Description	Count
Application	Phenotype-Cms Phenotype CMS Phenotype CMS 1.0 Phenotype CMS Phenotype CMS 2.6 Phenotype CMS Phenotype CMS 2.4 Phenotype CMS Phenotype CMS 2.5 Phenotype CMS Phenotype CMS 2.7 Phenotype CMS Phenotype CMS 2.5.1 Phenotype CMS Phenotype CMS * Phenotype CMS Phenotype CMS 2.1 Phenotype CMS Phenotype CMS 2.2 Phenotype CMS Phenotype CMS 2.0 Phenotype CMS Phenotype CMS 2.3	11

Common Weakness Enumeration (CWE)

CWE-310 - Cryptographic Issues

Common Attack Pattern Enumeration and Classification (CAPEC)

Signature Spoofing by Key Recreation
An attacker obtains an authoritative or reputable signer's private signature key by exploiting a cryptographic weakness in the signature algorithm or pseudorandom number generation and then uses this key to forge signatures from the original signer to mislead a victim into performing actions that benefit the attacker.

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

References