Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-5602

Опубликовано: 09 фев. 2017
Источник: nvd
CVSS3: 5.9
CVSS2: 4.3
EPSS Низкий

Описание

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for jappix 1.0.0 to 1.1.6.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jappix_project:jappix:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:jappix_project:jappix:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:jappix_project:jappix:1.0.2:*:*:*:*:*:*:*
cpe:2.3:a:jappix_project:jappix:1.0.3:*:*:*:*:*:*:*
cpe:2.3:a:jappix_project:jappix:1.0.4:*:*:*:*:*:*:*
cpe:2.3:a:jappix_project:jappix:1.0.5:*:*:*:*:*:*:*
cpe:2.3:a:jappix_project:jappix:1.0.6:*:*:*:*:*:*:*
cpe:2.3:a:jappix_project:jappix:1.0.7:*:*:*:*:*:*:*
cpe:2.3:a:jappix_project:jappix:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:jappix_project:jappix:1.1.1:*:*:*:*:*:*:*
cpe:2.3:a:jappix_project:jappix:1.1.2:*:*:*:*:*:*:*
cpe:2.3:a:jappix_project:jappix:1.1.3:*:*:*:*:*:*:*
cpe:2.3:a:jappix_project:jappix:1.1.4:*:*:*:*:*:*:*
cpe:2.3:a:jappix_project:jappix:1.1.5:*:*:*:*:*:*:*
cpe:2.3:a:jappix_project:jappix:1.1.6:*:*:*:*:*:*:*

EPSS

Процентиль: 48%
0.00245
Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

debian логотип

CVE-2017-5602

CVSS3: 5.9
debian
почти 9 лет назад

An incorrect implementation of "XEP-0280: Message Carbons" in multiple ...

github логотип

GHSA-2pjr-m4w4-33wx

CVSS3: 5.9
github
больше 3 лет назад

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for jappix 1.0.0 to 1.1.6.

EPSS

Процентиль: 48%
0.00245
Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-20