← Database

CVE-2025-26486

MEDIUM CVSS: 6.0 Published: 2025-03-19 Modified: 2026-06-17

Description

Broken or Risky Cryptographic Algorithm, Use of Password Hash With Insufficient Computational Effort, Use of Weak Hash, Use of a One-Way Hash with a Predictable Salt vulnerabilities in Beta80 "Life 1st Identity Manager" enable an attacker with access to password hashes to bruteforce user passwords or find a collision to ultimately while attempting to gain access to a target application that uses "Life 1st Identity Manager" as a service for authentication. This issue affects Life 1st: 1.5.2.14234.

Affected Platforms

Unknown

Weakness Type

CWE-327, CWE-328, CWE-760, CWE-916

References