Home / Vulnerability Database / Python : Insufficient number of iterations
Python
Python : Insufficient number of iterations
Classification
OWASP Top 10 2013
OWASP Top 10 2017
OWASP Top 10 2021
OWASP ASVS
HIPAA
Overview
The password-based key derivation function uses too few iterations.
The key derivation function (KDF) generates one or more secret keys based on a secret value (master key, password or passphrase) using a pseudorandom function. Salt values and a number of iterations are also used as parameters. A sufficient number of iterations provides the necessary stability of the algorithm. If the number of iterations is low, the possibility of attack increases, because an attacker can use “rainbow tables” to reverse the initial values of hashed passwords.
Sensitive Data Exposure vulnerabilities take the third place in the “OWASP Top 10 2017” web-application vulnerabilities ranking.
MEDIUM
DerScanner Severity Score
Do you want to fix Python : Insufficient number of iterations in your application?
See also
Python
Python : Debug mode on
Python
Python : Web3: Deprecated method
Python
