CVE Catalog
CVE-2000-0492
MediumExploitation Probability (EPSS)
Elevated risk1.19%
64th percentile - higher than 64% of all known CVEs
Summary
PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, allowing an attacker with access to the password file to easily decrypt the passwords.
Risk Assessment
Weak password encryption poses a significant security risk to the organization, as it allows unauthorized access to user accounts.
Recommendation
It is recommended to upgrade to a newer version of PassWD that employs stronger password encryption methods.
Original NVD description (English source)
PassWD 1.2 uses weak encryption (trivial encoding) to store passwords, which allows an attacker who can read the password file to easliy decrypt the passwords.