Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:40755
HistoryJun 01, 2023 - 8:10 a.m.

Authentication Bypass

2023-06-0108:10:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17
openfire
authentication
bypass
vulnerable
xmppserver
path traversal

0.974 High

EPSS

Percentile

99.9%

JSON

org.igniterealtime.openfire:xmppserver is vulnerable to authentication bypass. A remote unauthenticated attacker is able to access restricted pages in the Openfire Admin Console designated for administrative users due to a path traversal in the unauthenticated Openfire Setup Environment.

Related

thn 3
githubexploit 7
cvelist 1
nuclei 1
nessus 3
packetstorm 1
cve 1
hivepro 1
osv 3
redos 1
freebsd 1
metasploit 1
zdt 1
alpinelinux 1
prion 1
cisa_kev 1
nvd 1
github 1
rapid7blog 1
attackerkb 1
trellix 2
securelist 1
thn
thn
Thousands of Unpatched Openfire XMPP Servers Still Exposed to High-Severity Flaw
2023-08-24 08:21:00
Kinsing Actors Exploiting Recent Linux Flaw to Breach Cloud Environments
2023-11-03 13:12:00
Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits
2023-08-30 11:15:00
githubexploit
githubexploit
Exploit for Path Traversal in Igniterealtime Openfire
2023-12-15 16:30:51
Exploit for Path Traversal in Igniterealtime Openfire
2023-06-18 15:42:00
Exploit for Path Traversal in Igniterealtime Openfire
2023-07-07 07:48:24
cvelist
cvelist
CVE-2023-32315 Openfire administration console authentication bypass
2023-05-26 22:33:07
nuclei
nuclei
Openfire Administration Console - Authentication Bypass
2023-06-01 04:28:48
nessus
nessus
FreeBSD : Openfire administration console authentication bypass (9bcff2c4-1779-11ef-b489-b42e991fc52e)
2024-05-22 00:00:00
Openfire 3.10 < 4.6.8 / 4.7 < 4.7.5 Authentication Bypass
2023-06-29 00:00:00
Openfire Authentication Bypass (CVE-2023-32315)
2023-07-07 00:00:00
packetstorm
packetstorm
Openfire Authentication Bypass / Remote Code Execution
2023-07-19 00:00:00
cve
cve
CVE-2023-32315
2023-05-26 23:15:16
hivepro
hivepro
A Critical Vulnerability in Openfire Admin Console Actively Exploited in the Wild
2023-08-25 14:19:17
osv
osv
BIT-openfire-2023-32315
2024-03-06 10:59:27
CVE-2023-32315
2023-05-26 23:15:16
Administration Console authentication bypass in openfire xmppserver
2023-05-23 19:54:30
redos
redos
ROS-20240503-12
2024-05-03 00:00:00
freebsd
freebsd
Openfire administration console authentication bypass
2023-05-26 00:00:00
metasploit
metasploit
Openfire authentication bypass with RCE plugin
2023-07-08 09:48:17
zdt
zdt
Openfire Authentication Bypass / Remote Code Execution Exploit
2023-07-19 00:00:00
alpinelinux
alpinelinux
CVE-2023-32315
2023-05-26 23:15:16
prion
prion
Path traversal
2023-05-26 23:15:00
cisa_kev
cisa_kev
Ignite Realtime Openfire Path Traversal Vulnerability
2023-08-24 00:00:00
nvd
nvd
CVE-2023-32315
2023-05-26 23:15:16
github
github
Administration Console authentication bypass in openfire xmppserver
2023-05-23 19:54:30
rapid7blog
rapid7blog
Metasploit Weekly Wrap up
2023-07-21 18:08:03
attackerkb
attackerkb
CVE-2023-32315
2023-05-26 00:00:00
trellix
trellix
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
securelist
securelist
IT threat evolution in Q3 2023. Non-mobile statistics
2023-12-01 10:00:03

0.974 High

EPSS

Percentile

99.9%

JSON
Related for VERACODE:40755
thn3githubexploit7cvelist1nuclei1nessus3packetstorm1cve1hivepro1osv3redos1freebsd1metasploit1zdt1alpinelinux1prion1cisa_kev1nvd1github1rapid7blog1attackerkb1trellix2securelist1