| Package | Affected versions | Patched versions |
|---|---|---|
| arkeia | = 4.2= 4.2.8-2 |
Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free