CVE-2019-3907

Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method (MD5 hash of a salt and password).

Score

CVSS 3.1 7.5 High

Status

Modified - vulnreport@tenable.com

Published

2019-01-18

Last modified

2024-08-04

Weaknesses

CWE-798, CWE-916

Affected products

• Premisys Id (Identicard)

References

• http://www.securityfocus.com/bid/106552
• https://www.tenable.com/security/research/tra-2019-01