Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redosRedosROS-20240503-12
HistoryMay 03, 2024 - 12:00 a.m.

ROS-20240503-12

2024-05-0300:00:00
redos.red-soft.ru
5
openfire
cross-platform
real-time collaboration
server
administration console
vulnerability
path traversal
exploitation
attacker
privileges
unix

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

7.2 High

AI Score

Confidence

Low

0.974 High

EPSS

Percentile

99.9%

JSON

Vulnerability in administration console of cross-platform real-time collaboration server
Openfire is related to a path traversal capability. Exploitation of the vulnerability could allow an attacker,
acting remotely to escalate their privileges

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64openfire<= 4.7.5-1UNKNOWN

Related

thn 3
githubexploit 7
cvelist 1
nuclei 1
nessus 3
packetstorm 1
veracode 1
hivepro 1
osv 3
freebsd 1
cve 1
zdt 1
metasploit 1
alpinelinux 1
prion 1
cisa_kev 1
nvd 1
github 1
attackerkb 1
rapid7blog 1
trellix 2
securelist 1
thn
thn
Thousands of Unpatched Openfire XMPP Servers Still Exposed to High-Severity Flaw
2023-08-24 08:21:00
Kinsing Actors Exploiting Recent Linux Flaw to Breach Cloud Environments
2023-11-03 13:12:00
Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits
2023-08-30 11:15:00
githubexploit
githubexploit
Exploit for Path Traversal in Igniterealtime Openfire
2023-12-15 16:30:51
Exploit for Path Traversal in Igniterealtime Openfire
2023-06-18 15:42:00
Exploit for Path Traversal in Igniterealtime Openfire
2023-07-07 07:48:24
cvelist
cvelist
CVE-2023-32315 Openfire administration console authentication bypass
2023-05-26 22:33:07
nuclei
nuclei
Openfire Administration Console - Authentication Bypass
2023-06-01 04:28:48
nessus
nessus
FreeBSD : Openfire administration console authentication bypass (9bcff2c4-1779-11ef-b489-b42e991fc52e)
2024-05-22 00:00:00
Openfire 3.10 < 4.6.8 / 4.7 < 4.7.5 Authentication Bypass
2023-06-29 00:00:00
Openfire Authentication Bypass (CVE-2023-32315)
2023-07-07 00:00:00
packetstorm
packetstorm
Openfire Authentication Bypass / Remote Code Execution
2023-07-19 00:00:00
veracode
veracode
Authentication Bypass
2023-06-01 08:10:35
hivepro
hivepro
A Critical Vulnerability in Openfire Admin Console Actively Exploited in the Wild
2023-08-25 14:19:17
osv
osv
BIT-openfire-2023-32315
2024-03-06 10:59:27
CVE-2023-32315
2023-05-26 23:15:16
Administration Console authentication bypass in openfire xmppserver
2023-05-23 19:54:30
freebsd
freebsd
Openfire administration console authentication bypass
2023-05-26 00:00:00
cve
cve
CVE-2023-32315
2023-05-26 23:15:16
zdt
zdt
Openfire Authentication Bypass / Remote Code Execution Exploit
2023-07-19 00:00:00
metasploit
metasploit
Openfire authentication bypass with RCE plugin
2023-07-08 09:48:17
alpinelinux
alpinelinux
CVE-2023-32315
2023-05-26 23:15:16
prion
prion
Path traversal
2023-05-26 23:15:00
cisa_kev
cisa_kev
Ignite Realtime Openfire Path Traversal Vulnerability
2023-08-24 00:00:00
nvd
nvd
CVE-2023-32315
2023-05-26 23:15:16
github
github
Administration Console authentication bypass in openfire xmppserver
2023-05-23 19:54:30
attackerkb
attackerkb
CVE-2023-32315
2023-05-26 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap up
2023-07-21 18:08:03
trellix
trellix
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
securelist
securelist
IT threat evolution in Q3 2023. Non-mobile statistics
2023-12-01 10:00:03

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L

7.2 High

AI Score

Confidence

Low

0.974 High

EPSS

Percentile

99.9%

JSON
Related for ROS-20240503-12
thn3githubexploit7cvelist1nuclei1nessus3packetstorm1veracode1hivepro1osv3freebsd1cve1zdt1metasploit1alpinelinux1prion1cisa_kev1nvd1github1attackerkb1rapid7blog1trellix2securelist1