Lucene search
Hive ProHIVEPRO:C6F92829B5E4F0C31C4DD977EFF8ACBCHistoryAug 25, 2023 - 2:19 p.m.
A Critical Vulnerability in Openfire Admin Console Actively Exploited in the Wild
2023-08-2514:19:17
Hive Pro
www.hivepro.com
18
openfire
admin console
unauthorized access
vulnerability
ignite realtime
bypassing authentication
hiveforce labs
linkedin
threat report
0.974 High
EPSS
Percentile
99.9%
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The vulnerability (CVE-2023-32315) in Ignite Realtime Openfire, enabling unauthorized access to privileged pages. Attackers exploit this by bypassing authentication, prompting immediate updates for affected servers. To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.
Related
thn
thn
githubexploit
githubexploit
Exploit for Path Traversal in Igniterealtime Openfire
2023-12-15 16:30:51
Exploit for Path Traversal in Igniterealtime Openfire
2023-06-18 15:42:00
Exploit for Path Traversal in Igniterealtime Openfire
2023-07-07 07:48:24
cvelist
cvelist
CVE-2023-32315 Openfire administration console authentication bypass
2023-05-26 22:33:07
nuclei
nuclei
Openfire Administration Console - Authentication Bypass
2023-06-01 04:28:48
nessus
nessus
FreeBSD : Openfire administration console authentication bypass (9bcff2c4-1779-11ef-b489-b42e991fc52e)
2024-05-22 00:00:00
Openfire 3.10 < 4.6.8 / 4.7 < 4.7.5 Authentication Bypass
2023-06-29 00:00:00
Openfire Authentication Bypass (CVE-2023-32315)
2023-07-07 00:00:00
packetstorm
packetstorm
Openfire Authentication Bypass / Remote Code Execution
2023-07-19 00:00:00
cve
cve
CVE-2023-32315
2023-05-26 23:15:16
veracode
veracode
Authentication Bypass
2023-06-01 08:10:35
osv
osv
BIT-openfire-2023-32315
2024-03-06 10:59:27
CVE-2023-32315
2023-05-26 23:15:16
Administration Console authentication bypass in openfire xmppserver
2023-05-23 19:54:30
redos
redos
ROS-20240503-12
2024-05-03 00:00:00
freebsd
freebsd
Openfire administration console authentication bypass
2023-05-26 00:00:00
metasploit
metasploit
Openfire authentication bypass with RCE plugin
2023-07-08 09:48:17
zdt
zdt
Openfire Authentication Bypass / Remote Code Execution Exploit
2023-07-19 00:00:00
alpinelinux
alpinelinux
CVE-2023-32315
2023-05-26 23:15:16
prion
prion
Path traversal
2023-05-26 23:15:00
cisa_kev
cisa_kev
Ignite Realtime Openfire Path Traversal Vulnerability
2023-08-24 00:00:00
nvd
nvd
CVE-2023-32315
2023-05-26 23:15:16
github
github
Administration Console authentication bypass in openfire xmppserver
2023-05-23 19:54:30
rapid7blog
rapid7blog
Metasploit Weekly Wrap up
2023-07-21 18:08:03
attackerkb
attackerkb
CVE-2023-32315
2023-05-26 00:00:00
trellix
trellix
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
securelist
securelist
IT threat evolution in Q3 2023. Non-mobile statistics
2023-12-01 10:00:03