CoreCVE
Back

HIGH

bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password

Published Nov 3, 2023

Description

bcrypt password hashing in Botan before 2.1.0 does not correctly handle passwords with a length between 57 and 72 characters, which makes it easier for attackers to determine the cleartext password.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-319

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Nov 3, 2023
Updated Sep 12, 2024
Reserved Mar 24, 2017
Link CVE-2017-7252
CISA Vulnrichment
Updated Sep 5, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-7252
Red Hat
Severity n/a
Public date n/a
Links CVE-2017-7252