Jira raised:

https://issues.apache.org/jira/browse/OFBIZ-3006


> It looks as though no salt data is used when saving encrypted entity
> data making the stored data susceptible to dictionary attacks, for
> details see:
>
> http://en.wikipedia.org/wiki/Salt_(cryptography)
>
>

Reply via email to