The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Ignite Realtime Openfire before 3.6.5 does not properly implement the register.password (aka canChangePassword) console configuration setting, which allows remote authenticated users to bypass intended policy and change their own passwords via a passwd_change IQ packet.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade openfire | Dec 10, 2025 | May 4, 2009 |
| Gentoo Linux | — | Upgrade net-im/openfire. | Oct 30, 2017 | May 11, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub