Insecure-hashing-algorithm-md4
Insecure hashing algorithm md4
insecure-hashing-algorithm-md4
insecure-hashing-algorithm-md4
The use of the MD4 hashing algorithm was identified which is considered insecure. MD4 is not collision resistant and is therefore not suitable for cryptographic or secure use-cases. Use stronger algorithms such as SHA256, SHA512, or adaptive hashing algorithms such as argon2 or bcrypt.
Likelihood: HIGH
Confidence: MEDIUM
CWE:
- CWE-327: Use of a Broken or Risky Cryptographic Algorithm
OWASP:
- A03:2017 - Sensitive Data Exposure
- A02:2021 - Cryptographic Failures