Summary
It was discovered that the LDAP authentication modules in Prosody Community
Modules did not fully verify XMPP addresses when checking for administrator
privileges. A remote attacker could possibly use this issue to gain
administrator privileges.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | prosody-modules | 0.0~hg20150813.12ac88940fe3-2ubuntu0.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | prosody-modules | 0.0~hg20170929.c53cc1ae4788+dfsg-3ubuntu0.1~esm1 |
Vulnerabilities 1
-
Unscored —
The mod_auth_ldap and mod_auth_ldap2 Community Modules through 2020-01-27 for Prosody incompletely verify the XMPP addr…
References
-
report
https://ubuntu.com/security/CVE-2020-8086