Control iD iDSecure passwordCustom Authentication Bypass

An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that allows an unauthenticated attacker to compute valid credentials that can be used to bypass authentication and act as an administrative user.

iDS-Core.dll!ControliD.iDSecure.Tools.ServerJWT.Login() allows login via "passwordCustom":
        public LoginResult Login(LoginRequest client)
        {
           [...]
                if (client.passwordCustom == null)
                {
              [...]
                }
                else
                {
                    if (!(client.passwordCustom == Operators.DesbloqueioGerenciador(ServerJWT.Serial, client.passwordRandom)))
                    {
                        throw new DALException(Localization.Translate("InvalidPassword"));
                    }
                    operators = …