CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.0. It affects Java. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2009-1595
Severity
MEDIUM
CVSS
4
EPSS
2.23%
Java
Original NVD Description
The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.