CVE-2008-6511: Input Validation
Published Mar 23, 2009
·Updated
Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter.
Affected Software
25 affected components
igniterealtime Openfire=3.2.2
igniterealtime Openfire<=3.6.0a
igniterealtime Openfire=3.0.0
igniterealtime Openfire=3.0.1
igniterealtime Openfire=3.2.1
igniterealtime Openfire=3.4.4
igniterealtime Openfire=3.1.0
igniterealtime Openfire=3.4.0
igniterealtime Openfire=3.6.0
igniterealtime Openfire=3.2.3
igniterealtime Openfire=3.4.5
igniterealtime Openfire=3.3.2
igniterealtime Openfire=3.2.0
igniterealtime Openfire=3.5.0
igniterealtime Openfire=3.4.3
igniterealtime Openfire=2.6.1
igniterealtime Openfire=2.6.0
igniterealtime Openfire=2.6.2
igniterealtime Openfire=3.1.1
igniterealtime Openfire=3.5.2
igniterealtime Openfire=3.3.3
igniterealtime Openfire=3.5.1
igniterealtime Openfire=3.2.4
igniterealtime Openfire=3.3.0
igniterealtime Openfire=3.4.1
Event History
Mar 23, 2009
CVE Published
via MITRE·07:26 PM
Data Sourced
via MITRE·07:26 PM
Description
Data Sourced
via NVD·08:00 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6511?
CVE-2008-6511 is categorized as a medium severity vulnerability due to its potential for phishing attacks.
2
How do I fix CVE-2008-6511?
To fix CVE-2008-6511, upgrade Openfire to version 3.6.1 or later to eliminate the open redirect vulnerability.
3
Which versions of Openfire are affected by CVE-2008-6511?
CVE-2008-6511 affects Openfire versions 3.6.0a and earlier.
4
What type of vulnerability is CVE-2008-6511?
CVE-2008-6511 is an open redirect vulnerability that allows attackers to redirect users to arbitrary websites.
5
Can CVE-2008-6511 be exploited remotely?
Yes, CVE-2008-6511 can be exploited remotely by attackers to conduct phishing attacks.