CWE-836: Use of Password Hash Instead of Password for Authentication

The product includes a client that computes a hash of a password and sends the hash to another component, which compares the supplied hash to the hash obtained from a data store of password hashes.