CVE-2021-3833 | BDVDB-2026-162156 Detail

Description#

Integria IMS login check uses a loose comparator ("==") to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12021-10-07Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.