CVE-2018-16988

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-05-02 · updated 2026-06-17
Weakness: CWE-640

Description

An issue was discovered in Open XDMoD through 7.5.0. An authentication bypass (account takeover) exists due to a weak password reset mechanism. A brute-force attack against an MD5 rid value requires only 600 guesses in the plausible situation where the attacker knows that the victim has started a password-reset process (pass_reset.php, password_reset.php, XDUser.php) in the past few minutes.

Affected products

ubccr xdmod: before 8.0.0 — fixed in 8.0.0

How to fix

Upgrade to a fixed version: ubccr xdmod 8.0.0. Check the vendor advisory for mitigations.

References

https://github.com/grymer/CVE/blob/master/CVE-2018-16988.md
https://github.com/grymer/CVE/blob/master/CVE-2018-16988.md

Get alerted when CVE-2018-16988 or the next vulnerability affects your stack