PostgreSQL uses the username for a salt when generating... · CVE-2002-1657 · GitHub Advisory Database · GitHub

PostgreSQL uses the username for a salt when generating...

Moderate severity Unreviewed Published Apr 30, 2022 to the GitHub Advisory Database • Updated Feb 18, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

PostgreSQL uses the username for a salt when generating passwords, which makes it easier for remote attackers to guess passwords via a brute force attack.

References

Published by the National Vulnerability Database

Dec 31, 2002

Published to the GitHub Advisory Database Apr 30, 2022

Last updated Feb 18, 2024