CVE-2020-17494

Published: Nov 12, 2020Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Untangle Firewall NG before 16.0 uses MD5 for passwords.

Affected (1)

Products: Untangle: Untangle Firewall Ng

1 product

Untangle Firewall Ng

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Untangle Untangle Firewall Ng	Before 16.0

Related CWEs

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (8)

https://github.com/untangle/ngfw_src/blob/1d232efe2c17a8838b59bbbeaf166dafa94676af/uvm/hier/usr/share/untangle/web/auth/index.py#L196-L200

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/untangle/ngfw_src/search?q=author%3Abmastbergen+committer-date%3A2020-08-10&type=commits

Source: cve@mitre.org

PatchThird Party Advisory

https://pastebin.com/s7UYG3vX

Source: cve@mitre.org

Third Party Advisory

https://wiki.untangle.com/index.php/16.0.0_-_16.0.1_Changelog

Source: cve@mitre.org

Release NotesThird Party Advisory

https://github.com/untangle/ngfw_src/blob/1d232efe2c17a8838b59bbbeaf166dafa94676af/uvm/hier/usr/share/untangle/web/auth/index.py#L196-L200

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://github.com/untangle/ngfw_src/search?q=author%3Abmastbergen+committer-date%3A2020-08-10&type=commits

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://pastebin.com/s7UYG3vX

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://wiki.untangle.com/index.php/16.0.0_-_16.0.1_Changelog

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesThird Party Advisory

Timeline

No history available yet.