← Back

Ontrack

ontrack

Vendor: Ontrack Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-37164
1Ontrack Project
1Ontrack
Jun 17, 2026
Sep 8, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Inoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. Additionally, user passwords are hashed without a salt or peppe...Show more
Inoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. Additionally, user passwords are hashed without a salt or pepper making it much easier for tools like hashcat to crack the hashes.Show less