CVE-2020-10538

An issue was discovered in Epikur before 20.1.1. It stores the secret passwords of the users as MD5 hashes in the database. MD5 can be brute-forced efficiently and should not be used for such purposes. Additionally, since no salt is used, rainbow tables can speed up the attack.

• CWE-916

• https://www.x41-dsec.de/lab/advisories/x41-2020-003-epikurExploit, Third Party Advisory
• https://www.x41-dsec.de/lab/advisories/x41-2020-003-epikurExploit, Third Party Advisory

Published

Feb 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1053<p>An elevation of privilege vulnerability exists when Direc…7.8
• CVE-2020-10531An issue was discovered in International Components for Unic…8.8
• CVE-2020-10532The AD Helper component in WatchGuard Fireware before 5.8.5.…7.5
• CVE-2020-10534In the GlobalBlocking extension before 2020-03-10 for MediaW…9.8
• CVE-2020-10535GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows…5.3
• CVE-2020-10537An issue was discovered in Epikur before 20.1.1. A Glassfish…7.8
• CVE-2020-10539An issue was discovered in Epikur before 20.1.1. The Epikur …9.8
• CVE-2020-1054An elevation of privilege vulnerability exists in Windows wh…7.8
• CVE-2020-10540Untis WebUntis before 2020.9.6 allows CSRF for certain combi…8.8
• CVE-2020-10541Zoho ManageEngine OpManager before 12.4.179 allows remote co…9.8
• CVE-2020-10543Perl before 5.30.3 on 32-bit platforms allows a heap-based b…8.2
• CVE-2020-10544An XSS issue was discovered in tooltip/tooltip.js in PrimeTe…6.1