VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 15, 2019· Updated Sep 16, 2024

Juniper ATP: Password hashing uses DES and a hardcoded salt

CVE-2019-0030

Description

Juniper ATP uses DES and a hardcoded salt for password hashing, allowing for trivial de-hashing of the password file contents. This issue affects Juniper ATP 5.0 versions prior to 5.0.3.

Affected products

2
  • Zyxel/ATPllm-fuzzy
    Range: <5.0.3
  • Juniper Networks/Juniper ATPv5
    Range: 5.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.