CVE-2017-5606

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in…

published February 9, 2017

CVSS
—
EPSS
1%
Percentile
55.3
In the wild
Unconfirmed
What it is

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Xabber (only if manually enabled: 1.0.30, 1.0.30 VIP, beta 1.0.3 - 1.0.74; Android).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00783 · 55.3th percentile
Published
2017-02-09T20:00Z
EPSS history
Timeline
  • 09 FEB 20:00Z
    An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in…
    cvelistv5