Dolibarr Inadequate Encryption Strength Vulnerability - CVE-2017-7888 - Vulnerability Database

Dolibarr Inadequate Encryption Strength Vulnerability - CVE-2017-7888

Critical

Reference: CVE-2017-7888

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-7888

Title: Dolibarr Inadequate Encryption Strength Vulnerability

Overview:

Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm which makes brute-force attacks easier.