CVE-2015-6973

16.09.2015, 19:59

Multiple cross-site request forgery (CSRF) vulnerabilities in Ignite Realtime Openfire 3.10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password via a crafted request to user-password.jsp, (2) add users via a crafted request to user-create.jsp, (3) edit server settings or (4) disable SSL on the server via a crafted request to server-props.jsp, or (5) add clients via a crafted request to plugins/clientcontrol/permitted-clients.jsp.

CSRF

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.8 UNKNOWN	NETWORK	MEDIUM		AV:N/AC:M/Au:N/C:P/I:P/A:P
mitre	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 93%

Vendor	Product	Version
igniterealtime	openfire	3.10.2

𝑥

= Vulnerable software versions

Known Exploits!

Common Weakness Enumeration

CWE-352 - Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References

http://hyp3rlinx.altervista.org/advisories/AS-OPENFIRE-CSRF.txt

http://packetstormsecurity.com/files/133554/Openfire-3.10.2-Cross-Site-Request-Forgery.html

http://www.securityfocus.com/archive/1/536470/100/0/threaded

https://security.gentoo.org/glsa/201612-50

https://www.exploit-db.com/exploits/38192/

http://hyp3rlinx.altervista.org/advisories/AS-OPENFIRE-CSRF.txt

http://packetstormsecurity.com/files/133554/Openfire-3.10.2-Cross-Site-Request-Forgery.html

http://www.securityfocus.com/archive/1/536470/100/0/threaded

https://security.gentoo.org/glsa/201612-50

https://www.exploit-db.com/exploits/38192/