-
Incident report
-
Resolution: Duplicate
-
Minor
-
None
-
4.4.0alpha2
-
None
Zabbix before version 4.4.0alpha2 stores credentials in the "users" table with the password hash stored as a MD5 hash, which is a known insecure hashing method. Furthermore, no salt is used with the hash.
- duplicates
-
ZBXNEXT-1898 Strong cryptography for encoding frontend passwords
- Closed