Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2024-24553

Bludit uses SHA1 as Password Hashing Algorithm

Description

Bludit uses the SHA-1 hashing algorithm to compute password hashes. Thus, attackers could determine cleartext passwords with brute-force attacks due to the inherent speed of SHA-1. In addition, the salt that is computed by Bludit is generated with a non-cryptographically secure function.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bludit Bludit

Default version status: unaffected

  • 2.0affected

References