Skip to content
OpenAdvisories

Package · Maven

org.igniterealtime.smack:smack-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2016-10027

    Smack allows the bypass of TLS protections

    Race condition in the XMPP library in Smack before 4.1.9, when the SecurityMode.required TLS setting has been set, allows man-in-the-middle attackers to bypass TLS protections and trigger use of cleartext for client authentication by stripping the "starttls" …

    org.igniterealtime.smack:smack-core Maven