CVE-2023-2900

NFine Rapid Development Platform CheckLogin weak hash

State: Published
Severity: 3.7 Low
Published: May 25, 2023
Updated: Aug 2, 2024
Reserved: May 25, 2023

Description

A vulnerability was found in NFine Rapid Development Platform 20230511. It has been classified as problematic. Affected is an unknown function of the file /Login/CheckLogin. The manipulation leads to use of weak hash. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. VDB-229974 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Scores

CVSS	Score	Vector	Source
3.1	3.7 Low	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N	VulDB
3.0	3.7 Low	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N	VulDB
2.0	2.6 Low	AV:N/AC:H/Au:N/C:P/I:N/A:N	VulDB

Weaknesses

CWE-328 Use of Weak Hash

Affected Products

Product	Versions
Rapid Development PlatformNFine	20230511Affected

References

https://vuldb.com/?id.229974vdb-entry
https://vuldb.com/?ctiid.229974signaturepermissions-required
https://github.com/Peanut886/Vulnerability/blob/main/webray.com.cn/NFine-Rapid-development-platform-has-weak-password-vulnerability.mdexploit

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.