Use of Password Hash Instead of Password for Authentication
CWE-836
The product includes a client that computes a hash of a password and sends the hash to another component, which compares the supplied hash to the hash obtained from a data store of password hashes.
We track 12 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.4.
Latest Use of Password Hash Instead of Password for Authentication vulnerabilities
- 7.4 High severity
Agora Project: Use of Password Hash Instead of Password for Authentication
Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user's stored bcrypt password hash to authenticate as that user without knowing the actual password, caused by the legacy AGORAP_LOG/AGORA
- 9.1 Critical severity
motioneye: Plaintext Storage of a Password
motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Prior to 0.44.0, motionEye accepts the client-controlled meye_username and meye_password_hash cookies as authenticatio
- 8.1 High severity
Setracker2 Parental Control App (Android)…: Use of Password Hash Instead of Password for Authentication
Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior only require the password hash when authenticating with backend services from the client. This could allow an attacker, who knows the hash, to authenticate and gain full access.
- 7.5 High severity
FortiWeb: Use of Password Hash Instead of Password for Authentication
A use of password hash instead of password for authentication vulnerability [CWE-836] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0
- 8.0 High severity
ELOG: Improper Neutralization of Input During Web Page Generation
ELOG allows an authenticated user to upload arbitrary HTML files. The HTML content is executed in the context of other users when they open the file. Because ELOG includes usernames and password hashes in certain HTTP requests, an attacker can obtain the targe
- 7.5 High severity
E3 Supervisory Control: Use of Password Hash Instead of Password for Authentication
E3 Site Supervisor Control (firmware version < 2.31F01) application services (MGW and RCI) uses client side hashing for authentication. An attacker can authenticate by obtaining only the password hash.
- 7.5 High severity
service: Use of Password Hash Instead of Password for Authentication
The TeleMessage service through 2025-05-05 relies on the client side (e.g., the TM SGNL app) to do MD5 hashing, and then accepts the hash as the authentication credential.
- 8.8 High severity
CLUSTERPRO X (EXPRESSCLUSTER X): Use of Password Hash Instead of Password for Authentication
CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.
- 9.8 Critical severity
GMS: Use of Password Hash Instead of Password for Authentication
Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.
- 9.8 Critical severity
SICK FTMG-ESD15AXX AIR FLOW SENSOR: Improper Authentication
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to use a password hash instead of an actual password
- 8.8 High severity
Pi-hole®'s Web interface (based off of AdminLTE) provides a central location to manage your…
Pi-hole®'s Web interface (based off of AdminLTE) provides a central location to manage your Pi-hole. Versions 4.0 and above, prior to 5.18.3 are vulnerable to Insufficient Session Expiration. Improper use of admin WEBPASSWORD hash as "Remember me for 7 days" c
- 8.8 High severity
AVideo: Improper Authentication
An improper password check exists in the login functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. An attacker that owns a users' password hash will be able to use it to directly login into the account, leading to increased privileges.