Security Advisory
CVE-2009-2951
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers to determine cleartext passwords.