Jivejdon versions through 5.0 store account passwords as unsalted MD5 digests. This weakness, identified as a improperly stored password hash, allows attackers to obtain the plain password values with minimal effort. Because MD5 lacks a salt and is computationally inexpensive, an adversary can use precomputed tables or GPU‑accelerated rainbow tables to recover user credentials, potentially compromising user accounts and any systems that rely on those credentials.

The vulnerability affects the Banq Jivejdon product, all released versions up to and including 5.0. No specific build or patch level is listed as fixed, so any installation of Jivejdon through 5.0 is vulnerable.

The CVSS score of 8.2 indicates high severity. An attacker must either gain database access or successfully perform SQL injection to read the user table and obtain the MD5 hashes. Because the hashes are unsalted, cracking passwords can be executed quickly with readily available tools. No EPSS score is available, and the vulnerability is not listed in CISA KEV, but its high CVSS and straightforward exploitation path increase the risk for any affected deployment.