high7.5
CVE-2009-2951
Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers to determine cleartext…
Impact
Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers to determine cleartext passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phenotype-Cms | Phenotype Cms | through 2.8 Versions 1.0, 2.0, 2.1, 2.2, 2.3 |