Dolibarr ERP/CRM 4.0.4 stores passwords with the MD5 algorithm, which makes brute-force attacks easier.
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dolibarr_erp/crm | Dolibarr | 4.0.4 (including) | 4.0.4 (including) |
| Dolibarr | Ubuntu | artful | * |
| Dolibarr | Ubuntu | esm-apps/xenial | * |
| Dolibarr | Ubuntu | trusty | * |
| Dolibarr | Ubuntu | xenial | * |
| Dolibarr | Ubuntu | yakkety | * |
| Dolibarr | Ubuntu | zesty | * |