PEAR Predictable Verification Hash Vulnerability in Election Account Requests Authorization Bypass

A vulnerability exists in PEAR versions prior to 1.33.0, where predictable verification hashes can be exploited to guess verification tokens. This may allow attackers to verify election account requests without proper authorization. The issue arises because the verification hash is derived from predictable inputs using MD5, creating a window of opportunity for exploitation.

Impact

Exploitation of this vulnerability could lead to unauthorized verification of election account requests, bypassing normal authorization processes.

Remediation

Users can upgrade to PEAR version 1.33.0 or later to address this vulnerability.