CVE-2024-7407
Description
Use of a custom password encoding algorithm in Streamsoft Prestiż software allows straightforward decoding of passwords using their encoded forms, which are stored in the application's database. One has to know the encoding algorithm, but it can be deduced by observing how password are transformed. This issue was fixed in 18.2.377 version of the software.
Is your site exposed to CVE-2024-7407?
Run a free security scan — no signup, results in seconds.
Weakness Type (CWE)
References
Frequently Asked Questions
What is CVE-2024-7407? +
How do I check if I'm vulnerable to CVE-2024-7407? +
Related Vulnerabilities
Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after …
The Magistra software uses weak custom encryption, relies on an outdated compression algorithm to protect the database, and contains embedded …
The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is …
Use of a weak password encoding algorithm in Płatnik software allows a user who obtains encoded password to easily decode …
Improperly stored passwords in the config file in Itron MV-90 xi 3.0 allows attackers to decode the passwords and password …
The Campbell Scientific CSI Web Server stores web authentication credentials in a file with a specific file name. Passwords within …
