C-sharp : Insufficient number of iterations

The password-based key derivation function uses too few iterations.

The key derivation function (KDF) generates one or more secret keys based on a secret value (master key, password or passphrase) using a pseudorandom function. Salt values ​​and a number of iterations are also used as parameters. A sufficient number of iterations provides the necessary stability of the algorithm. If the number of iterations is low, the attack possibility increases, because an attacker can use “rainbow tables” to reverse the initial values ​​of hashed passwords.

Sensitive Data Exposure vulnerabilities take the third place in the “OWASP Top 10 2017” web-application vulnerabilities ranking.