STER Software Weak Password Encoding Vulnerability

A vulnerability exists in STER software developed by the Central Institute of Labor Protection - National Research Institute, all versions prior to 9.5. The issue arises from the use of a weak password encoding algorithm, which allows the values of passwords to be guessed by analyzing the encoding of passwords with known values. This vulnerability could lead to unauthorized access to sensitive information.

Impact

Exploitation of this vulnerability could result in the unauthorized disclosure of password values, potentially leading to unauthorized access to user accounts or sensitive information.

Remediation

Users are advised to update to STER version 9.5 or later, where this vulnerability has been fixed.