CVE-2016-2379

—

CVSS 3.0

8.8 high

EPSS

<1%p33

Published

Mar 29, 2017 (Mar 29, 2017)

Modified

Jun 17, 2026

Description

The Mxit protocol uses weak encryption when encrypting user passwords, which might allow attackers to (1) decrypt hashed passwords by leveraging knowledge of client registration codes or (2) gain login access by eavesdropping on login messages and re-using the hashed passwords.

Vendors: pidgin
Products: mxit
Weakness: CWE-326
Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.