Summary
It was discovered that Prosody incorrectly validated the virtual host
associated with a user session across stream restarts. A remote attacker
could use this issue to gain unintended access to resources.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | prosody | 0.10.0-1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Medium 4.2
prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not verify that the virtu…
References
-
report
https://ubuntu.com/security/CVE-2018-10847