CVE-2018-16988
CriticalCVSS 9.8Summary
An authentication bypass issue was discovered in Open XDMoD through version 7.5.0, which can lead to account takeover. A weak password reset mechanism allows an attacker to perform a brute-force attack on the MD5 rid value, requiring only 600 guesses if they know the victim initiated a password reset process in the past few minutes.
Risk Assessment
The organization is at risk of user account takeover, which may lead to unauthorized access to sensitive data. Attackers can exploit this vulnerability to gain control over user accounts.
Recommendation
It is recommended to implement a stronger password reset mechanism and monitor password reset attempts for suspicious activity. Additionally, consider implementing extra security measures such as multi-factor authentication.
Original NVD description (English source)
An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover) exists due to a weak password reset mechanism. A brute-force attack against an MD5 rid value requires only 600 guesses in the plausible situation where the attacker knows that the victim has started a password-reset process (pass_reset.php, password_reset.php, XDUser.php) in the past few minutes.