CVE-2019-3907

High

Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method (MD5 hash…

tenable·CWE-798·Published 2019-01-18

CVSS

7.5

EPSS

0.01

KEV

Exploits

cve.orgen

162 chars

Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method (MD5 hash of a salt and password).

NVDen

162 chars

Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method (MD5 hash of a salt and password).

La versión 3.1.190 de Premisys Identicard almacena las credenciales de usuario y otra información sensible con un método de cifrado débil conocido (hash MD5 de una sal y contraseña).

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N