CVE-2022-37164
Assigner: mitre
Published: 2022-09-08T15:16:56
State: PUBLISHED
affected: product: n/a
vendor: n/a
versions: status: affected
version: n/a
descriptions: value: Inoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. Additionally, user passwords are hashed without a salt or pepper making it much easier for tools like hashcat to crack the hashes.
problemTypes: descriptions: description: n/a
type: text