Skip to content
OpenAdvisories

Package · Maven

org.opencastproject:opencast-common-jpa-impl

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2020-5229

    Opencast stores passwords using outdated MD5 hash algorithm

    Opencast before 8.1 stores passwords using the rather outdated and cryptographically insecure MD5 hash algorithm. Furthermore, the hashes are salted using the username instead of a random salt, causing hashes for users with the same username and password to c…

    opencast opencast org.opencastproject:opencast-common-jpa-impl Maven