CVE-2017-7888

CVE-2017-7888 describes a critical vulnerability in Dolibarr ERP/CRM version 4.0.4, where user passwords are insecurely stored using the MD5 hashing algorithm. This weakness significantly simplifies brute-force attacks, allowing an unauthenticated attacker to remotely compromise the system with low attack complexity, leading to complete loss of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been confirmed, the vulnerability has garnered significant community discussion, indicating awareness and potential interest in its exploitation.