CVE-2021-3833
CRITICALIntegria IMS - Authentication Bypass via MD5 Hash Loose Comparison
Title source: llmDescription
Integria IMS login check uses a loose comparator ("==") to compare the MD5 hash of the password provided by the user and the MD5 hash stored in the database. An attacker with a specific formatted password could exploit this vulnerability in order to login in the system with different passwords.
References (2)
Core 2
Core References
Release Notes, Vendor Advisory x_refsource_confirm
https://integriaims.com/en/services/updates/
Third Party Advisory x_refsource_confirm
https://www.incibe.es/en/incibe-cert/notices/aviso/integria-ims-incorrect-authorization
Scores
CVSS v3
9.8
EPSS
0.0108
EPSS Percentile
60.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-697
Status
published
Products (1)
artica/integria_ims
5.0.92
Published
Oct 07, 2021
Tracked Since
Feb 18, 2026