CVE-2023-32315

Produto

Ignite Realtime / Openfire

Vulnerabilidade

Ignite Realtime Openfire Path Traversal Vulnerability

Adicionado ao KEV

24 de ago. de 2023

Corrigir até

14 de set. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the Openfire Admin Console reserved for administrative users.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.igniterealtime.org/downloads/#openfire; https://nvd.nist.gov/vuln/detail/CVE-2023-32315