high7.5
CVE-2018-12420
IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request.
Impact
IceHrm before 23.0.1.OS has a risky usage of a hashed password in a request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Icehrm | Icehrm | before 23.0.1.os |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/gamonoid/icehrm/commit/025a8283ab5d679ff99a6b82398e4c8efed1ad9d
- https://github.com/gamonoid/icehrm/releases/tag/v23.0.1.OS
- https://github.com/gamonoid/icehrm/commit/025a8283ab5d679ff99a6b82398e4c8efed1ad9d
- https://github.com/gamonoid/icehrm/releases/tag/v23.0.1.OS