CVEvulnerability

CVE-2021-39182

7.5 HIGH Published 2021-11-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-11-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-326, CWE-327, CWE-328, CWE-916

Description

EnroCrypt is a Python module for encryption and hashing. Prior to version 1.1.4, EnroCrypt used the MD5 hashing algorithm in the hashing file. Beginners who are unfamiliar with hashes can face problems as MD5 is considered an insecure hashing algorithm. The vulnerability is patched in v1.1.4 of the product. As a workaround, users can remove the `MD5` hashing function from the file `hashing.py`.

Affected configurations

• enrocrypt project enrocrypt (< 1.1.4)

Related

Weakness · CWE (4)

  • CWE-326 Inadequate Encryption Strength weakness
  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness
  • CWE-328 Use of Weak Hash weakness
  • CWE-916 Use of Password Hash With Insufficient Computational Effort weakness

References