Description
Typo 5.1.3 and earlier uses a hard-coded salt for calculating password hashes, which makes it easier for attackers to guess passwords via a brute force attack.
References
- 20081031 Typo <= 5.1.3 Multiple Vulnerabilities mailing-list
- 32272 third-party-advisory
- 4550 third-party-advisory