Signature Detail
Short Name |
HTTP:JABBER-SERVER-BYPASS1 |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Keywords |
Jive Software Openfire Jabber Server Authentication Bypass1 |
Release Date |
2015/10/07 |
Update Number |
2543 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Jive Software Openfire Jabber Server Authentication Bypass1
An authentication bypass vulnerability exists in Openfire Server product by Jive Software. The vulnerability is due to an insecure design in the Tomcat filter where all functions in the admin web-interface are not protected from unauthorized access. Remote attackers could exploit this vulnerability to access functions in the admin web-interface without supplying valid credentials. A successful attack attempt will bypass the server authentication and the attacker can have full access to all functions in the admin webinterface without providing any user credentials. Thus the attacker can gain full control of the Openfire Jabber server and cause disclosure of sensitive information.
References
- BugTraq: 10392
- CVE: CVE-2004-1908
- CVE: CVE-2004-0487
- URL: http://www.kb.cert.org/vuls/id/312510
- URL: http://theinsider.deep-ice.com/texts/advisory54.txt