Description
The product uses an algorithm that produces a digest (output value) that does not meet security expectations for a hash function that allows an adversary to reasonably determine the original input (preimage attack), find another input that can produce the same hash (2nd preimage attack), or find multiple inputs that evaluate to the same hash (birthday attack).
Modes of Introduction:
– Architecture and Design
Related Weaknesses
CWE-326
CWE-327
Consequences
Access Control: Bypass Protection Mechanism
Potential Mitigations
Phase: Architecture and Design
Effectiveness: High
Description:
CVE References
- CVE-2020-25685
- DNS product uses a weak hash (CRC32 or SHA-1) of the query name, allowing attacker to forge responses by computing domain names with the same hash.
- CVE-2012-6707
- blogging product uses MD5-based algorithm for passwords.
- CVE-2019-14855
- forging of certificate signatures using SHA-1 collisions.
- CVE-2017-15999
- mobile app for backup sends SHA-1 hash of password in cleartext.
- CVE-2006-4068
- Hard-coded hashed values for username and password contained in client-side script, allowing brute-force offline attacks.
