From 344c2d3c3d475b64bd166d9ead1ff07382b5cd3b Mon Sep 17 00:00:00 2001 From: Anders Schack-Mulligen Date: Thu, 25 Mar 2021 15:42:57 +0100 Subject: [PATCH] Update java/ql/src/experimental/Security/CWE/CWE-759/HashWithoutSalt.ql --- .../ql/src/experimental/Security/CWE/CWE-759/HashWithoutSalt.ql | 2 ++ 1 file changed, 2 insertions(+) diff --git a/java/ql/src/experimental/Security/CWE/CWE-759/HashWithoutSalt.ql b/java/ql/src/experimental/Security/CWE/CWE-759/HashWithoutSalt.ql index 343a073a27b..736fe100c39 100644 --- a/java/ql/src/experimental/Security/CWE/CWE-759/HashWithoutSalt.ql +++ b/java/ql/src/experimental/Security/CWE/CWE-759/HashWithoutSalt.ql @@ -2,6 +2,8 @@ * @name Use of a hash function without a salt * @description Hashed passwords without a salt are vulnerable to dictionary attacks. * @kind path-problem + * @problem.severity warning + * @precision low * @id java/hash-without-salt * @tags security * external/cwe-759