openfire -- multiple vulnerabilitiesentered 2008-11-19
no CVE referenced
CVE details
CVE-2009-1595
The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.
- Score
- 4.0 medium
- Published
- 2009-05-11
- Links
- NVD · cve.org · Report wrong data
Matched ports (0)
No port is within the affected range.