CVE-2024-25420

2024-03-2600:00:00

mitre

github.com

privilege escalation

remote attacker

system property

AI Score

7.1

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:igniterealtime:openfire:4.9.0:*:*:*:*:*:*:*"
    ],
    "vendor": "igniterealtime",
    "product": "openfire",
    "versions": [
      {
        "status": "affected",
        "version": "4.9.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]