Description
bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password.
Unscored
CVE-2017-7252
EUVD-2017-16283GHSA-qhqh-9m2p-r8vv
bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes i…
Published Nov 3, 2023 · Updated Sep 12, 2024 · Assigned by mitre