Description
Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers to determine cleartext passwords.
Unscored
CVE-2009-2951
EUVD-2009-2938GHSA-vxrr-hhh6-m2mm
Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers to…
Published Aug 24, 2009 · Updated Aug 7, 2024 · Assigned by mitre