PT-2009-4084 · Ignite Realtime · Openfire

Name of the Vulnerable Software and Affected Versions: Openfire versions prior to 3.6.5 Description: The issue is related to the improper implementation of the register.password also known as canChangePassword console configuration setting. This allows remote authenticated users to bypass the...