CVE-2017-7252

CVE-2017-7252 describes a weakness in the bcrypt password hashing implementation within Botan versions prior to 2.1.0. Specifically, passwords between 57 and 72 characters in length are not handled correctly, making them more susceptible to cleartext recovery. This vulnerability carries a high CVSS score of 7.5, indicating a network-based attack with low complexity that could lead to high confidentiality impact without requiring user interaction or privileges. While the vulnerability is significant, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or Nuclei, and it has received limited community discussion and media coverage.