CVE-2012-4670 in Tigase Tigase XMPP Server
요약 (영어)
Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.
예약하다
2012. 08. 25.
공개
2012. 08. 25.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 61803 | Tigase Tigase XMPP Server XMPP Server Dialback 권한 상승 | 20 | 입증되지 않음 | 공식 수정 | CVE-2012-4670 |