PT-2009-1978 · Ignite Realtime · Openfire
Andreas Kurtz
·
Published
2009-03-23
·
Updated
2018-10-11
·
CVE-2008-6508
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Openfire versions 3.6.0a and earlier
Description
A directory traversal issue in the AuthCheck filter of the Admin Console allows remote attackers to bypass authentication and access the admin interface by including a .. (dot dot) in a URI. This can be achieved by crafting a specific URI sequence, such as /setup/setup-/.., which matches the Exclude-Strings list.
Recommendations
For Openfire versions 3.6.0a and earlier, consider restricting access to the Admin Console until a fix is available. As a temporary workaround, disabling the AuthCheck filter may prevent exploitation, but this should be done with caution as it may have unintended consequences on the security of the Admin Console. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openfire