7.5

CVE-2007-2975

The admin console in Ignite Realtime Openfire 3.3.0 and earlier (formerly Wildfire) does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the downloader.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ignite Realtime ≫ Openfire Version <= 3.3.0
Ignite Realtime ≫ Openfire Version2.6.0
Ignite Realtime ≫ Openfire Version2.6.1
Ignite Realtime ≫ Openfire Version2.6.2
Ignite Realtime ≫ Openfire Version3.0.0
Ignite Realtime ≫ Openfire Version3.0.1
Ignite Realtime ≫ Openfire Version3.1.0
Ignite Realtime ≫ Openfire Version3.1.1
Ignite Realtime ≫ Openfire Version3.2.0
Ignite Realtime ≫ Openfire Version3.2.1
Ignite Realtime ≫ Openfire Version3.2.2
Ignite Realtime ≫ Openfire Version3.2.3
Ignite Realtime ≫ Openfire Version3.2.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.79% 0.857
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.