4C Strategies Exonaut Password Hashing Vulnerability in Database

A vulnerability exists in 4C Strategies Exonaut version 21.6, where passwords stored in the database are hashed without the use of a salt. This lack of salting can make the hashed passwords more susceptible to attacks, such as rainbow table attacks, where precomputed tables of hashes are used to crack unsalted password hashes.

Impact

Exploitation of this vulnerability could lead to unsalted password hashes being stored in the database, increasing the risk of these hashes being cracked and the original passwords being compromised.