CVE-2018-1000812

Severity Score

8.1

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Artica Integria IMS version 5.0 MR56 Package 58, likely earlier versions contains a CWE-640: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Password recovery process, line 45 of general/password_recovery.php that can result in IntegriaIMS web app user accounts can be taken over. This attack appear to be exploitable via Network access to IntegriaIMS web interface . This vulnerability appears to have been fixed in fixed in versions released after commit f2ff0ba821644acecb893483c86a9c4d3bb75047.

Artica Integria IMS versión 5.0 MR56 Paquete 58, probablemente versiones anteriores contiene un CWE-640: Mecanismo de recuperación de contraseña débil para la vulnerabilidad de contraseña olvidada en el proceso de recuperación de contraseña, línea 45 de general/password_recovery.php que puede resultar en Las cuentas de usuario de la aplicación web IntegriaIMS se pueden hacer cargo. Este ataque parece ser explotable a través del acceso de red a la interfaz web De IntegriaIMS. Esta vulnerabilidad parece haber sido fijada en versiones publicadas después de confirmar f2ff0ba821644acecb893483c86a9c4d3bb75047.

*Credits: N/A

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2018-10-06 CVE Reserved
2018-12-20 CVE Published
2024-05-12 EPSS Updated
2024-08-05 CVE Updated
2024-08-05 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-640: Weak Password Recovery Mechanism for Forgotten Password

CAPEC

References (3)

URL	Tag	Source
https://cp270.wordpress.com/2018/05/14/war-story-password-resets	Third Party Advisory

URL	Date	SRC
https://github.com/fleetcaptain/integria-takeover	2024-08-05

URL	Date	SRC
https://github.com/articaST/integriaims/commit/f2ff0ba821644acecb893483c86a9c4d3bb75047	2019-08-16

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Artica Search vendor "Artica"		Integria Ims Search vendor "Artica" for product "Integria Ims"				<= 5.0 Search vendor "Artica" for product "Integria Ims" and version " <= 5.0"		-		Affected