Security Advisory

CVE-2012-4670

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2012-08-25 16:00:00
Last updated 2024-08-06 20:42:55
Assigner mitre
State PUBLISHED

Description

Tigase XMPP Server before 5.1.0 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via a (1) Verify Response or (2) Authorization Response.