PT-2018-9536 · Artica · Artica Integria Ims

Carl · Publicado 2018-12-20 · Atualizado 2019-08-16 · CVE-2018-1000812

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Artica Integria IMS versions prior to the version released after commit f2ff0ba821644acecb893483c86a9c4d3bb75047

Description The issue is related to a weak password recovery mechanism in the password recovery process. This can result in IntegriaIMS web app user accounts being taken over. The attack appears to be exploitable via network access to the IntegriaIMS web interface. The vulnerable code is located in line 45 of general/password recovery.php.

Recommendations For Artica Integria IMS versions prior to the version released after commit f2ff0ba821644acecb893483c86a9c4d3bb75047, update to a version released after the specified commit to resolve the issue. As a temporary workaround, consider restricting access to the password recovery process until the update is applied.

Exploit

Correção

Enumeração de Fraquezas

CWE-640

Identificadores relacionados

CVE-2018-1000812

Produtos afetados

Artica Integria Ims

Referências · 5

• 🔥 https://github.com/fleetcaptain/integria-takeover · Exploit
• https://cp270.wordpress.com/2018/05/14/war-story-password-resets · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000812 · Nota de Segurança
• ❌ https://github.com/articaST/integriaims/commit/f2ff0ba821644acecb893483c86a9c4d3bb75047 · Correção, Deleted
• https://osv.dev/vulnerability/CVE-2018-1000812 · Aviso do Fabricante