Property
Languagerust
Severitymedium
CWECWE-328: Use of Weak Hash
Confidence LevelHigh
Impact LevelMedium
Likelihood LevelLow

Description#

The code uses outdated and insecure hash functions like MD2, MD4, MD5, or SHA1 for cryptographic purposes. These algorithms are considered broken and can be exploited by attackers to compromise data integrity or security.

Impact#

Attackers may be able to generate hash collisions or reverse engineer sensitive data, leading to unauthorized access, data tampering, or credential compromise. This can put user information and application security at serious risk.