ID:6862 - Exploit for Inadequate Encryption Strength in Credential Provider - CVE-2021-31796

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to the effective key space used to encrypt the passwords is significantly reduced. A remote attacker can gain access to sensitive information on the target system.

Remediation