Common Weakness Enumeration

    CWE Definition / CWE-759

    CWE-759: Use of a One-Way Hash without a Salt

    The product uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product does not also use a salt as part of the input.

    Published:3 Mar 2009
    Organization:MITRE
    Modified:11 Dec 2025

    Related Weakness

    CWE-916: Use of Password Hash With Insufficient Computational Effort