← Back

Ontrack Project

ontrack_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Ontrack
ontrack
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-37164
1Ontrack Project
1Ontrack
Jun 17, 2026
Sep 8, 2022
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Inoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. Additionally, user passwords are hashed without a salt or peppe...Show more
Inoda OnTrack v3.4 employs a weak password policy which allows attackers to potentially gain unauthorized access to the application via brute-force attacks. Additionally, user passwords are hashed without a salt or pepper making it much easier for tools like hashcat to crack the hashes.Show less