Description

The software records password hashes in a data store, receives a hash of a password from a client, and compares the supplied hash to the hash obtained from the data store.

Modes of Introduction:

– Implementation

Likelihood of Exploit:

Related Weaknesses

CWE-287
CWE-602

Consequences

Access Control: Bypass Protection Mechanism, Gain Privileges or Assume Identity

An attacker could bypass the authentication routine without knowing the original password.

Potential Mitigations

CVE References

• CVE-2009-1283
  • Product performs authentication with user-supplied password hashes that can be obtained from a separate SQL injection vulnerability (CVE-2009-1282).

• CVE-2005-3435
  • Product allows attackers to bypass authentication by obtaining the password hash for another user and specifying the hash in the pwd argument.