Optimizely EPiServer CMS Password Complexity Vulnerability

A medium-severity vulnerability exists in Optimizely EPiServer.CMS.Core versions prior to 12.32.0, due to inadequate enforcement of password complexity requirements. The application allows users to create passwords with a minimum length of 6 characters, but these passwords lack the necessary complexity to withstand contemporary attack methods such as password spraying or offline cracking.

Impact

The vulnerability could lead to weaker password security, making it easier for attackers to compromise accounts using password spraying or offline cracking techniques.