Skip to main content

Weak Encoding for Password

CVE-2024-52334

Medium
6.3/10

Summary

A vulnerability has been identified in syngo.plaza VB30E (All versions < VB30E_HF07). The affected application does not encrypt the passwords properly. This could allow an attacker to recover the original passwords and might gain unauthorized access.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • LOW
  • NONE

CWE-261 - Weak Encoding for Password

Obscuring a password with a trivial encoding does not protect the password.

References

Advisory Timeline

  • Published