CVE-2018-16988
CriticalCVSS 9.8Summary
An authentication bypass issue was discovered in Open XDMoD through version 7.5.0, which can lead to account takeover. A weak password reset mechanism allows an attacker to perform a brute-force attack on the MD5 rid value, requiring only 600 guesses if they know the victim initiated a password reset process in the past few minutes.
Risk Assessment
The organization is at risk of user account takeover, which may lead to unauthorized access to sensitive data. Attackers can exploit this vulnerability to gain control over user accounts.
Recommendation
It is recommended to implement a stronger password reset mechanism and monitor password reset attempts for suspicious activity. Additionally, consider implementing extra security measures such as multi-factor authentication.
Other vulnerabilities in Open XDMoD
See all- CVE-2026-45777Critical
Open XDMoD versions 9.5.0 through 11.0.2 contain a vulnerability allowing remote arbitrary system command execution on the web server. An attacker can execute commands with the privileges of the web server process.
- CVE-2026-45776Medium
Open XDMoD before version 11.0.3 has a flaw in access control logic that allows an attacker to send a crafted HTTPS POST request setting a session variable used for authorization. If the optional Job Performance (SUPReMM) module is installed, the attacker can bypass data access restrictions and view other users' compute job efficiency metrics.
Original NVD description (English source)
An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover) exists due to a weak password reset mechanism. A brute-force attack against an MD5 rid value requires only 600 guesses in the plausible situation where the attacker knows that the victim has started a password-reset process (pass_reset.php, password_reset.php, XDUser.php) in the past few minutes.