CVE-2009-1595

The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of…

published May 11, 2009

CVSS
—
EPSS
2%
Percentile
82.6
In the wild
Unconfirmed
What it is

The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02228 · 82.6th percentile
Published
2009-05-11T14:02Z
EPSS history
Timeline
  • 11 MAY 14:02Z
    The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of…
    cvelistv5