Sauter EY-WS505F0x0 moduWeb Vision before 1.6.0 allows remote attackers to bypass authentication by leveraging knowledge of a password hash without knowledge of the associated password.
Software security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.
Link | Tags |
---|---|
http://seclists.org/fulldisclosure/2016/Feb/25 | mailing list |
https://ics-cert.us-cert.gov/advisories/ICSA-16-033-01 | third party advisory us government resource |