Ignite Realtime Smack API 'ParseRoster' Security Bypass Vulnerability
BID:67124
Info
Ignite Realtime Smack API 'ParseRoster' Security Bypass Vulnerability
| Bugtraq ID: | 67124 |
| Class: | Design Error |
| CVE: |
CVE-2014-0364 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 29 2014 12:00AM |
| Updated: | Jul 15 2015 12:45AM |
| Credit: | Thijs Alkemade |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Ignite Realtime Smack API 'ParseRoster' Security Bypass Vulnerability
Ignite Realtime Smack API is prone to a security-bypass vulnerability.
An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Smack API 3.4.1 is vulnerable; other versions may also be affected.
Ignite Realtime Smack API is prone to a security-bypass vulnerability.
An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Smack API 3.4.1 is vulnerable; other versions may also be affected.
Exploit / POC
Ignite Realtime Smack API 'ParseRoster' Security Bypass Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Ignite Realtime Smack API 'ParseRoster' Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Ignite Realtime Smack API 'ParseRoster' Security Bypass Vulnerability
References:
References: