CVE-2025-26486
Severity CVSS v4.0:
Pending analysis
Type:
CWE-327
Use of a Broken or Risky Cryptographic Algorithm
Publication date:
19/03/2025
Last modified:
02/07/2025
Description
Broken or Risky Cryptographic Algorithm, Use of Password Hash <br />
With Insufficient Computational Effort, Use of Weak Hash, Use of a <br />
One-Way Hash with a Predictable Salt vulnerabilities in Beta80 "Life 1st Identity Manager"<br />
enable an attacker with access to<br />
password hashes<br />
to bruteforce user passwords or find a collision to ultimately while attempting to gain access to a target application that uses "Life 1st Identity Manager" as a service for authentication.<br />
This issue affects Life 1st: 1.5.2.14234.
Impact
Base Score 3.x
6.00
Severity 3.x
MEDIUM