Lucene search
GoogleOSV:GHSA-6PWG-GG6J-5CRMHistoryMar 26, 2024 - 9:30 p.m.
Ignite Realtime Openfire privilege escalation vulnerability
2024-03-2621:30:47
Google
osv.dev
9
ignite realtime
openfire
privilege escalation
vulnerability
room_cache
software
An issue in Ignite Realtime Openfire v.4.8.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.
| CPE | Name | Operator | Version |
|---|---|---|---|
| org.igniterealtime.openfire:xmppserver | eq | 4.2.0 |
References
github.com/igniterealtime/Openfire
github.com/igniterealtime/Openfire/blob/main/xmppserver/src/main/java/org/jivesoftware/openfire/muc/spi/LocalMUCRoomManager.java
github.com/igniterealtime/Openfire/commit/d66bddd29dbf56aa9b822635619fa66cca6f2112
nvd.nist.gov/vuln/detail/CVE-2024-25421
www.hackthebox.com/blog/openfire-cves-explained-CVE-2024-25420-CVE-2024-25421
www.igniterealtime.org/projects/openfire
Related
osv
osv
Ignite Realtime Openfire privilege escalation vulnerability
2024-03-26 21:30:47
nvd
nvd
CVE-2024-25421
2024-03-26 21:15:52
CVE-2024-25420
2024-03-26 21:15:52
cvelist
cvelist
CVE-2024-25420
2024-03-26 00:00:00
CVE-2024-25421
2024-03-26 00:00:00
cve
cve
CVE-2024-25421
2024-03-26 21:15:52
CVE-2024-25420
2024-03-26 21:15:52
github
github
Ignite Realtime Openfire privilege escalation vulnerability
2024-03-26 21:30:47
Ignite Realtime Openfire privilege escalation vulnerability
2024-03-26 21:30:47
veracode
veracode
Improper Privilege Management
2024-03-28 05:38:00
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
15.6%
Related for OSV:GHSA-6PWG-GG6J-5CRM