PT-2023-4482 · Openfire+2 · Openfire+1
Siebene
·
Published
2023-05-23
·
Updated
2026-03-11
·
CVE-2023-32315
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:N/C:C/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Openfire versions 3.10.0 through 4.6.7
Openfire versions 4.7.0 through 4.7.4
Description
The vulnerability is related to a path traversal attack in the administrative console of Openfire, allowing an unauthenticated user to access restricted pages. This issue affects all versions of Openfire released since April 2015. The estimated number of potentially affected devices worldwide is significant, with over 3,000 Openfire servers reportedly at risk. There have been real-world incidents where this issue was exploited, including the deployment of Kinsing malware and cryptominers. Technical details about exploitation include the use of path traversal to access restricted pages in the Openfire Admin Console.
Recommendations
For Openfire versions 3.10.0 through 4.6.7, upgrade to version 4.6.8 or later.
For Openfire versions 4.7.0 through 4.7.4, upgrade to version 4.7.5 or later.
As a temporary workaround, consider restricting access to the setup environment to minimize the risk of exploitation.
Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openfire
Red Os