Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-4669
cve-2012-4669
m-link
r14.6
r15.1
security vulnerability
xmpp
domain spoofing
6.9 Medium
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
35.0%
M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted.
Affected configurations
Node
isodem-linkMatch14.6
ORisodem-linkMatch15.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| isode:m-link | isode m-link | eq | 14.6 |
| isode:m-link | isode m-link | eq | 15.1 |
Related
prion
prion
Cross site request forgery (csrf)
2012-08-25 16:55:00
cvelist
cvelist
CVE-2012-4669
2022-10-03 16:15:32
nvd
nvd
CVE-2012-4669
2012-08-25 16:55:00
6.9 Medium
AI Score
Confidence
Low
5.8 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
35.0%
Related for CVE-2012-4669