CVE-2025-2265
CVE-2025-2265
Título es
CVE-2025-2265
Jue, 13/03/2025 – 17:15
Tipo
CWE-916
Gravedad 2.0 Txt
Pendiente de análisis
Título en
CVE-2025-2265
Descripción en
The password of a web user in "Sante PACS Server.exe" is zero-padded to 0x2000 bytes, SHA1-hashed, base64-encoded, and stored in the USER table in the SQLite database HTTP.db. However, the number of hash bytes encoded and stored is truncated if the hash contains a zero byte
13/03/2025
13/03/2025
Vector CVSS:3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Gravedad 3.1 (CVSS 3.1 Base Score)
7.80
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
HIGH
Referencias
https://www.tenable.com/security/research/tra-2025-08
Enviar en el boletín
Off
