Security Advisory
CVE-2015-7707
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter to user-edit-form.jsp.