CVE-2017-7888: Weak Encryption
Published May 10, 2017
·Updated
Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier.
Affected Software
2 affected components
composer/dolibarr/dolibarr<=4.0.4
dolibarr Dolibarr Erp\/crm=4.0.4
Event History
May 10, 2017
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
May 17, 2022
Advisory Published
02:45 AM
Frequently Asked Questions
1
What is the severity of CVE-2017-7888?
CVE-2017-7888 is considered a high severity vulnerability due to the use of MD5 for password storage, making it susceptible to brute-force attacks.
2
How do I fix CVE-2017-7888?
To fix CVE-2017-7888, upgrade to a version of Dolibarr that uses a stronger password hashing algorithm, such as bcrypt or Argon2.
3
What impact does CVE-2017-7888 have on my system?
CVE-2017-7888 allows attackers to easily crack user passwords, potentially leading to unauthorized access and data breaches.
4
Which versions of Dolibarr are affected by CVE-2017-7888?
CVE-2017-7888 affects Dolibarr ERP/CRM version 4.0.4 and earlier.
5
Can CVE-2017-7888 be exploited remotely?
Yes, CVE-2017-7888 can be exploited remotely if an attacker has network access to the affected Dolibarr application.