Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Versa Director, Versa Analytics and VOS, Passwords are not hashed using an adaptive cryptographic hash function or key derivation function prior to storage. Popular hashing algorithms based on the Merkle-Damgardconstruction (such as MD5 and SHA-1) alone are insufficient in thwarting password cracking. Attackers can generate and use precomputed hashes for all possible password character combinations (commonly referred to as "rainbow tables") relatively quickly. The use of adaptive hashing algorithms such asscryptorbcryptor Key-Derivation Functions (i.e.PBKDF2) to hash passwords make generation of such rainbow tables computationally infeasible.
CVSS Information
N/A
Vulnerability Type
不充分的凭证保护机制
Vulnerability Title
Versa Networks Versa Director 安全漏洞
Vulnerability Description
Versa Director是Versa Networks的虚拟化和服务创建平台 Versa Networks 存在安全漏洞，该漏洞源于在Versa Director、Versa Analytics和VOS中，密码在存储之前没有使用自适应加密哈希函数或密钥推导函数进行处理。攻击者利用该漏洞可以相对较快地为所有可能的密码字符组合（通常称为“彩虹表”）生成并使用预先计算的哈希值。
CVSS Information
N/A
Vulnerability Type
N/A