Vulnerability in Bestpractical Rt

CVE-2011-0009

Best Practical Solutions RT 3.x before 3.8.9rc2 and 4.x before 4.0.0rc4 uses the MD5 algorithm for password hashes, which makes it easier for context-dependent attackers to determine cleartext passwords via a brute-force attack on the database.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.019 (77.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References