Home / Vulnerability Database / Go : Insufficient cost of a generation
Go
Go : Insufficient cost of a generation
Classification
OWASP Top 10 2013
OWASP Top 10 2017
OWASP Top 10 2021
OWASP MASVS
OWASP ASVS
HIPAA
Overview
The password-based key derivation function uses too few generation cost.
A sufficient generation cost provides the necessary stability of the algorithm. If the cost of generation is low, the possibility of attack increases, because an attacker can use “rainbow tables” to reverse the initial values of hashed passwords.
Sensitive Data Exposure vulnerabilities take the third place in the “OWASP Top 10 2017” web-application vulnerabilities ranking.
References
- OWASP Top 10 2013-A6-Sensitive Data Exposure
- CWE-916: Use of Password Hash With Insufficient Computational Effort
- CWE-326: Inadequate Encryption Strength
- OWASP Top 10 2017-A3-Sensitive Data Exposure
- PKCS #5: Password-Based Cryptography Specification
- CWE CATEGORY: OWASP Top Ten 2017 Category A6 - Security Misconfiguration
MEDIUM
DerScanner Severity Score
Do you want to fix Go : Insufficient cost of a generation in your application?
See also
Go
Go : Undocumented feature: special account
Go
Go : Nil salt
Go