Mantis Bug Tracker - Forums

Wow, I've just noticed it's even worse. So, MantisBT even stores an unsalted MD5-hashed copy of each password if LDAP authentication is enabled.
https://www.mantisbt.org/bugs/view.php?id=12957

Okay, so that means MantisBT uses plain MD5 to hash password and does not even salt them?