Ignite Realtime Openfire管理控制台身份验证绕过漏洞

详细信息

漏洞类型

路径遍历

漏洞描述

Ignite Realtime Openfire是Ignite Realtime社区的一款采用Java开发且基于XMPP（前称Jabber，即时通讯协议）的跨平台开源实时协作（RTC）服务器。它能够构建高效率的即时通信服务器，并支持上万并发用户数量。Openfire的管理控制台是一个基于web的应用程序，被发现容易受到通过设置环境进行的路径遍历攻击。这允许未经身份验证的用户在已配置的Openfire环境中使用未经身份认证的Openfire安装环境来访问Openfire管理控制台中为管理用户保留的受限页面。此漏洞影响自2015年4月以来发布的Openfire 3.10.0开的所有版本。

修复建议

升级至Openfire GIT存储库中提供的Openfire最新版本（4.6.8、4.7.5、4.8.0或更高版本）： https://github.com/igniterealtime/Openfire/security/advisories/GHSA-gw42-f939-fhvm

参考链接

• https://github.com/igniterealtime/Openfire/security/advisories/GHSA-gw42-f939-fhvm

  OSV · x_refsource_CONFIRM

• https://cxsecurity.com/cveshow/CVE-2023-32315/
• http://packetstormsecurity.com/files/173607/Openfire-Authentication-Bypass-Remote-Code-Execution.html

  OSV · Exploit · Third Party Advisory · VDB Entry

• https://www.igniterealtime.org/
• https://www.igniterealtime.org/downloads/#openfire
• https://www.igniterealtime.org/projects/openfire/plugin-archive.jsp?plugin=authfiltersanitizer
• https://www.igniterealtime.org/projects/openfire/plugin-archive.jsp?plugin=httpfileupload
• https://www.igniterealtime.org/projects/openfire/plugin-archive.jsp?plugin=monitoring
• https://www.igniterealtime.org/projects/openfire/plugin-archive.jsp?plugin=randomavatar
• https://owasp.org/www-community/attacks/Path_Traversal
• https://en.wikipedia.org/wiki/URL_encoding#Non-standard_implementations
• https://igniterealtime.atlassian.net/browse/OF-2595

  OSV

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34429
• https://github.com/igniterealtime/Openfire/commit/2ac00a1ff42f5d3547ef58e21f8cdec992bfcf97

  OSV

• https://github.com/igniterealtime/Openfire/commit/71f3def2adeaac62729cf544b645c6819c3d9868

  OSV

• https://github.com/igniterealtime/Openfire/commit/a3b5ebd5032ff7be9d3ada5bf52bea2df96ec881

  OSV

• https://github.com/igniterealtime/Openfire/releases/tag/v4.6.8

  OSV

• https://github.com/igniterealtime/Openfire/releases/tag/v4.7.5

  OSV

• https://nvd.nist.gov/vuln/detail/CVE-2023-32315

  OSV

• https://github.com/advisories/GHSA-gw42-f939-fhvm
• https://osv.dev/vulnerability/CVE-2023-32315

  OSV

• https://github.com/igniterealtime/Openfire

  OSV

• https://osv.dev/vulnerability/GHSA-gw42-f939-fhvm

  OSV

• https://osv.dev/vulnerability/BIT-openfire-2023-32315

  OSV

• https://github.com/projectdiscovery/nuclei-templates/blob/master/http/cves/2023/CVE-2023-32315.yaml

  Snyk

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog

  Snyk

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-32315

  OSV

• https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/32xxx/CVE-2023-32315.json

  OSV