CVE-2014-0364

The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ…

certcc·CWE-345·Published 2014-04-30

CVSS

—

EPSS

0.06

KEV

Exploits

Vendor statements (1)

rhn.redhat.com

cve.orgen

221 chars

The ParseRoster component in the Ignite Realtime Smack XMPP API before 4.0.0-rc1 does not verify the from attribute of a roster-query IQ stanza, which allows remote attackers to spoof IQ responses via a crafted attribute.

NVDes

238 chars

El componente ParseRoster en la API Ignite Realtime Smack XMPP anterior a 4.0.0-rc1 no verifica el atributo from de la cadena roster-query IQ, lo que permite a atacantes remotos falsificar respuestas IQ a través de un atributo manipulado.

CVE-2014-0364

Vendor statements (1)

CVSS metrics across sources