Common Weakness Enumeration

CWE-759 Use of a One-Way Hash without a Salt

Description

The product uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product does not also use a salt as part of the input.

Associated Reviewed Advisories

Vulnerabilities classified under CWE-759 ordered by modification date.

4 reviewed records

Advisory ID	NVD ID	Severity	PURLs	Summary	Last Modified
GHSA-8ff6-pc43-jwv3	CVE-2025-53884	MODERATE	golang/github.com/neuvector/neuvector	NeuVector has an insecure password storage and is vulnerable to rainbow attack	2026-07-02
GHSA-jgj7-c8vj-w563	CVE-2026-9370	LOW	maven/com.github.ulisesbocchio/jasypt-spring-boot maven/com.github.ulisesbocchio/jasypt-spring-boot-starter	jasypt-spring-boot Uses a One-Way Hash without a Salt	2026-06-30
GHSA-g29v-q6h7-76wh	CVE-2026-45787	MODERATE	npm/electerm	electerm's encrypt method not safe enough	2026-06-09
GHSA-h8h6-7752-g28c	CVE-2025-27408	MODERATE	npm/manifest	Manifest Uses a One-Way Hash without a Salt	2025-03-04