CVE-2025-44040

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-44040
An issue in OrangeHRM v.5.7 allows an attacker to escalate privileges via UserService.php and the checkForOldHash function. Authentication decisions may be made via PHP loose-equality comparisons if a specific MD5 value is present in the credential store. NOTE: this is disputed by the Supplier because an adversary has no way to place the specific MD5 value into the credential store (unless they already have full privileges) and because the specific MD5 value would not realistically be present otherwise.

7.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/hexomedin3/advisories/tree/main/CVE-2025-44040 Third Party Advisory
https://github.com/orangehrm/orangehrm/releases/tag/v5.7 Release Notes
Configurations

Configuration 1 (hide)

cpe:2.3:a:orangehrm:orangehrm:5.7:*:*:*:*:*:*:*
History

13 Oct 2025, 20:15

Type Values Removed Values Added
Summary (en) An issue in OrangeHRM v.5.7 allows an attacker to escalate privileges via the UserService.php and the checkFOrOldHash function (en) An issue in OrangeHRM v.5.7 allows an attacker to escalate privileges via UserService.php and the checkForOldHash function. Authentication decisions may be made via PHP loose-equality comparisons if a specific MD5 value is present in the credential store. NOTE: this is disputed by the Supplier because an adversary has no way to place the specific MD5 value into the credential store (unless they already have full privileges) and because the specific MD5 value would not realistically be present otherwise.

10 Jun 2025, 19:34

Type Values Removed Values Added
References () https://github.com/hexomedin3/advisories/tree/main/CVE-2025-44040 - () https://github.com/hexomedin3/advisories/tree/main/CVE-2025-44040 - Third Party Advisory
References () https://github.com/orangehrm/orangehrm/releases/tag/v5.7 - () https://github.com/orangehrm/orangehrm/releases/tag/v5.7 - Release Notes
CPE cpe:2.3:a:orangehrm:orangehrm:5.7:*:*:*:*:*:*:*
First Time Orangehrm
Orangehrm orangehrm

22 May 2025, 14:16

Type Values Removed Values Added
CWE CWE-269
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.2
Summary
  • (es) Un problema en OrangeHRM v.5.7 permite a un atacante escalar privilegios a través de UserService.php y la función checkFOrOldHash

21 May 2025, 21:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-21 21:16

Updated : 2025-10-13 20:15

NVD link : CVE-2025-44040

Mitre link : CVE-2025-44040

CVE.ORG link : CVE-2025-44040

JSON object : View

Products Affected

orangehrm

  • orangehrm
CWE
CWE-269

Improper Privilege Management