Weakness (CWE)

CWE-836: Use of Password Hash Instead of Password for Authentication

Base Incomplete

The product includes a client that computes a hash of a password and sends the hash to another component, which compares the supplied hash to the hash obtained from a data store of password hashes.

Source: MITRE CWE-836

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Unscored —

CVE-2023-34132 Public exploit

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-th…

SonicWall GMS Analytics Network devices

Jul 13, 2023

CWE-836: Use of Password Hash Instead of Password for Authentication

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-th…