Threats tagged 'ghsa-pmf3-v4rm-f24p'

A vulnerability in LOGO! Soft Comfort versions prior to V9 involves the project password feature storing passwords as unsalted SHA-256 hashes. This weak storage method allows attackers who obtain project files to efficiently perform offline dictionary or brute-force attacks against the password hash. The vulnerability has a CVSS score of 6.8, indicating a high severity level with high confidentiality impact but limited integrity and no availability impact.