Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP

Impact Minecraft Bedrock authentication and its protocol encryption are inseparably linked. One is not complete without the other. This vulnerability affects servers which are able to be directly connected to via the internet i.e. not behind a proxy. If you are using a proxy, please check that it...

PT-2022-28252

Name of the Vulnerable Software and Affected Versions PocketMine-MP versions 3.x Description This issue affects Minecraft Bedrock authentication, where the protocol encryption is inseparably linked to the authentication process. Servers directly connected to the internet are vulnerable, but those...