Security Advisory
CVE-2014-3451
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
OpenFire XMPP Server before 3.10 accepts self-signed certificates, which allows remote attackers to perform unspecified spoofing attacks.