CVE-2025-55053
BaseFortify
Publication date: 2025-09-09
Last updated on: 2025-09-11
Assigner: Israel National Cyber Directorate
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-328 | The product uses an algorithm that produces a digest (output value) that does not meet security expectations for a hash function that allows an adversary to reasonably determine the original input (preimage attack), find another input that can produce the same hash (2nd preimage attack), or find multiple inputs that evaluate to the same hash (birthday attack). |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is classified as CWE-328, which means it involves the use of a weak hash function. Weak hash functions can be exploited by attackers to compromise data integrity or security because they are more susceptible to collisions or preimage attacks.
How can this vulnerability impact me? :
The vulnerability can impact you by allowing an attacker to exploit the weak hash function to compromise the confidentiality of data, as indicated by the high confidentiality impact in the CVSS score. This could lead to unauthorized access to sensitive information.