ModernWMS Password Hash Disclosure Vulnerability

A vulnerability in ModernWMS version 1.0 allows unauthorized access to the MD5 hash of the administrator password and other related attributes. This issue persists even after the initial setup and password change. The vulnerability arises from excessive information exposure and inadequate access control on the '/user/list?culture=en-us' endpoint.

Impact

Exploitation of this vulnerability allows for unauthorized users to obtain the MD5 hash of the admin password, potentially leading to password cracking and unauthorized administrative access.

Reproduction

The vulnerability can be reproduced by sending a request to the '/user/list?culture=en-us' endpoint without authentication. This can be done using a Python script that targets the specified IP address and port where the ModernWMS application is running.