Описание
JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 2.6.1-1 |
| bionic | not-affected | 2.6.1-1 |
| cosmic | not-affected | 2.6.1-1 |
| devel | not-affected | 2.6.1-1 |
| disco | not-affected | 2.6.1-1 |
| eoan | not-affected | 2.6.1-1 |
| esm-apps/bionic | not-affected | 2.6.1-1 |
| esm-apps/focal | not-affected | 2.6.1-1 |
| esm-apps/jammy | not-affected | 2.6.1-1 |
| esm-apps/noble | not-affected | 2.6.1-1 |
Показывать по
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled.
JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled.
JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate ...
JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled.
7.5 High
CVSS2
9.8 Critical
CVSS3