PT-2018-9536 · Artica · Artica Integria Ims

Carl · Published 2018-12-20 · Updated 2019-08-16 · CVE-2018-1000812

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Artica Integria IMS versions prior to the version released after commit f2ff0ba821644acecb893483c86a9c4d3bb75047

Description The issue is related to a weak password recovery mechanism in the password recovery process. This can result in IntegriaIMS web app user accounts being taken over. The attack appears to be exploitable via network access to the IntegriaIMS web interface. The vulnerable code is located in line 45 of general/password recovery.php.

Recommendations For Artica Integria IMS versions prior to the version released after commit f2ff0ba821644acecb893483c86a9c4d3bb75047, update to a version released after the specified commit to resolve the issue. As a temporary workaround, consider restricting access to the password recovery process until the update is applied.

Exploit

Fix

Weakness Enumeration

CWE-640

Related Identifiers

CVE-2018-1000812

Affected Products

Artica Integria Ims

References · 5

• 🔥 https://github.com/fleetcaptain/integria-takeover · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-1000812 · Security Note
• ❌ https://github.com/articaST/integriaims/commit/f2ff0ba821644acecb893483c86a9c4d3bb75047 · Patch, Deleted
• https://osv.dev/vulnerability/CVE-2018-1000812 · Vendor Advisory
• https://cp270.wordpress.com/2018/05/14/war-story-password-resets · Note