Vulnerability in Phenotype-Cms Phenotype Cms

CVE-2009-2951

Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers to determine cleartext passwords.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.006 (45.9th percentile) — read the EPSS interpretation.

Affected products

Phenotype-cms Phenotype_cms — versions 1.0, 2.0, 2.1
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (vdb-entry, x_refsource_XF)