Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5pf8-m5c6-qc44

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Integria IMS login check uses a loose comparator ("==") to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords.

Integria IMS login check uses a loose comparator ("==") to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords.

EPSS

Процентиль: 69%
0.00607
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-697
CWE-863

Связанные уязвимости

CVSS3: 9.8
nvd
больше 4 лет назад

Integria IMS login check uses a loose comparator ("==") to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords.

EPSS

Процентиль: 69%
0.00607
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-697
CWE-863