CVE Catalog

CVE-2022-23348

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

High risk
2.90%

85th percentile - higher than 85% of all known CVEs

Summary

BigAnt Server version 5.6.06 uses weak password hashing functions, making password recovery easier.

Risk Assessment

An attacker can easily crack password hashes and gain unauthorized access to the server and stored data.

Recommendation

Immediately update BigAnt Server to the latest version and implement strong hashing algorithms such as bcrypt or Argon2.

Original NVD description (English source)

BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS