218 matches found
CVE-2020-11878: Use of Hard-coded Credentials
The Jitsi Meet aka docker-jitsi-meet stack on Docker before stable-4384-1 uses default passwords such as passw0rd for system accounts...
8x8: Outdated Coturn is vulnerable to known vulnerabilities (High)
Jitsi had several CoTurn servers that needed improvements to their access configurations and updated...
8x8: Disclosure of Users Information On Wordpress Api [https://jitsi.org/]
Jitsi was running a default WordPress site that had not yet been hardened to prevent user enumeration via the API...
MGASA-2017-0049 Updated jitsi packages fix security vulnerability
An incorrect implementation of XEP-0280: Message Carbons in Jitsi and other XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks CVE-2017-5603...
Updated jitsi packages fix security vulnerability
An incorrect implementation of XEP-0280: Message Carbons in Jitsi and other XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks CVE-2017-5603...
Jitsi User Impersonation Vulnerability
Jitsi is an open source, secure ZRTP encrypted, high quality SIP/XMPP video calling, conferencing, chatting, desktop sharing, file transferring. It can be installed on your favorite operating system and supports multiple IM networks. Jitsi suffers from a user impersonation vulnerability. An...
XMPP Clients User Impersonation Vulnerability
Exploit for multiple platform in category local exploits Multiple XMPP Clients User Impersonation Vulnerability Summary ------- An incorrect implementation of XEP-0280: Message Carbons0 in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerabl...
Design/Logic Flaw
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544...
CVE-2017-5603
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544...
CVE-2017-5603
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544...
CVE-2017-5603
Technical details for CVE-2017-5603 are not provided in the connected documents; no public specifics on affected products, root cause, or fixes are included. Monitor updates.
CVE-2017-5603
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544...
CVE-2017-5603: Improper Input Validation
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Jitsi 2.5.5061 - 2.9.5544...
PT-2017-16608
Name of the Vulnerable Software and Affected Versions Jitsi versions 2.5.5061 through 2.9.5544 Description The issue is related to an incorrect implementation of XEP-0280: Message Carbons in multiple XMPP clients, allowing a remote attacker to impersonate any user in the vulnerable application's...
Jitsi: undisclosed vulnerability (ZAI-2026-7J1UNZ)
Not disclosed. Details are not yet publicly disclosed...
Jitsi: undisclosed vulnerability (ZAI-2026-DFKCGH)
Not disclosed. Details are not yet publicly disclosed...