HOMEVULNERABILITIESVENDORSOntrack Project

Ontrack ProjectCVEs & Vulnerabilities

1 CVEs affecting Ontrack Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

ontrack 1
CVE-2022-37164CRITICAL

Inoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. Additionally, user passwords are hashed without a salt or pepper making it much easier for tools like hashcat to crack the hashes.

8 Sep 2022
9.8
CVSS
← PrevPage 1 / 1Next →
← All Vendors·CVE Database
Ontrack Project CVEs & Vulnerabilities — 1 Tracked