Lucene search

[email protected]CVE-2008-6508

HistoryMar 23, 2009 - 8:00 p.m.

CVE-2008-6508

2009-03-2320:00:00

CWE-22

[email protected]

web.nvd.nist.gov

In Wild

cve-2008-6508

directory traversal

authcheck filter

admin console

openfire 3.6.0a

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.4 High

AI Score

Confidence

High

0.665 Medium

EPSS

Percentile

97.9%

JSON

Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a … (dot dot) in a URI that matches the Exclude-Strings list, as demonstrated by a /setup/setup-/… sequence in a URI.

Affected configurations

NVD

Node

igniterealtimeopenfireRange≤3.6.0a

igniterealtimeopenfireMatch2.6.0

igniterealtimeopenfireMatch2.6.1

igniterealtimeopenfireMatch2.6.2

igniterealtimeopenfireMatch3.0.0

igniterealtimeopenfireMatch3.0.1

igniterealtimeopenfireMatch3.1.0

igniterealtimeopenfireMatch3.1.1

igniterealtimeopenfireMatch3.2.0

igniterealtimeopenfireMatch3.2.1

igniterealtimeopenfireMatch3.2.2

igniterealtimeopenfireMatch3.2.3

igniterealtimeopenfireMatch3.2.4

igniterealtimeopenfireMatch3.3.0

igniterealtimeopenfireMatch3.3.2

igniterealtimeopenfireMatch3.3.3

igniterealtimeopenfireMatch3.4.0

igniterealtimeopenfireMatch3.4.1

igniterealtimeopenfireMatch3.4.3

igniterealtimeopenfireMatch3.4.4

igniterealtimeopenfireMatch3.4.5

igniterealtimeopenfireMatch3.5.0

igniterealtimeopenfireMatch3.5.1

igniterealtimeopenfireMatch3.5.2

igniterealtimeopenfireMatch3.6.0

CPENameOperatorVersion
igniterealtime:openfireigniterealtime openfirele3.6.0a
igniterealtime:openfireigniterealtime openfireeq2.6.0
igniterealtime:openfireigniterealtime openfireeq2.6.1
igniterealtime:openfireigniterealtime openfireeq2.6.2
igniterealtime:openfireigniterealtime openfireeq3.0.0
igniterealtime:openfireigniterealtime openfireeq3.0.1
igniterealtime:openfireigniterealtime openfireeq3.1.0
igniterealtime:openfireigniterealtime openfireeq3.1.1
igniterealtime:openfireigniterealtime openfireeq3.2.0
igniterealtime:openfireigniterealtime openfireeq3.2.1

CPE	Name	Operator	Version
igniterealtime:openfire	igniterealtime openfire	le	3.6.0a
igniterealtime:openfire	igniterealtime openfire	eq	2.6.0
igniterealtime:openfire	igniterealtime openfire	eq	2.6.1
igniterealtime:openfire	igniterealtime openfire	eq	2.6.2
igniterealtime:openfire	igniterealtime openfire	eq	3.0.0
igniterealtime:openfire	igniterealtime openfire	eq	3.0.1
igniterealtime:openfire	igniterealtime openfire	eq	3.1.0
igniterealtime:openfire	igniterealtime openfire	eq	3.1.1
igniterealtime:openfire	igniterealtime openfire	eq	3.2.0
igniterealtime:openfire	igniterealtime openfire	eq	3.2.1