Vulnerabilities > CVE-2019-19766 - Use of Password Hash With Insufficient Computational Effort vulnerability in Bitwarden Server

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
bitwarden
CWE-916
NVD
Published: 2019-12-12
Updated: 2021-07-21

Summary

The Bitwarden server through 1.32.0 has a potentially unwanted KDF.

Vulnerable Configurations

Part Description Count
Application
Bitwarden
58

Common Weakness Enumeration (CWE)

References