Ingenium Learning Management System Reversible Password Hash Weakness
BID:5970
Info
Ingenium Learning Management System Reversible Password Hash Weakness
| Bugtraq ID: | 5970 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 15 2002 12:00AM |
| Updated: | Oct 15 2002 12:00AM |
| Credit: | Discovery of this issue is credited to Brian Enigma <[email protected]>. |
| Vulnerable: |
Click2Learn Ingenium Learning Management System 6.1 Click2Learn Ingenium Learning Management System 5.1 |
| Not Vulnerable: | |
Discussion
Ingenium Learning Management System Reversible Password Hash Weakness
Ingenium Learning Management System uses a weak algorithm to hash user and administrative credentials. Passwords may be trivially obtained by reversing the password hash.
An attacker must be able to gain unauthorized access to the password hashes for this issue to be exploited. This may be achieved by taking advantage of the issue described in Bugtraq ID 5969. Hashed user credentials will also be stored in the database, and may potentially be retrieved by an attacker with the ability to construct or influence SQL queries.
Ingenium Learning Management System uses a weak algorithm to hash user and administrative credentials. Passwords may be trivially obtained by reversing the password hash.
An attacker must be able to gain unauthorized access to the password hashes for this issue to be exploited. This may be achieved by taking advantage of the issue described in Bugtraq ID 5969. Hashed user credentials will also be stored in the database, and may potentially be retrieved by an attacker with the ability to construct or influence SQL queries.
Exploit / POC
Ingenium Learning Management System Reversible Password Hash Weakness
The following proof-of-concept was submitted by Brian Enigma <[email protected]>:
The following proof-of-concept was submitted by Brian Enigma <[email protected]>: