CVE-2017-10807 Auth bypass in n/a
Attackers can authenticate anonymously to JabberD servers even when anonymous SASL is disabled, bypassing intended access controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-10807?
CVE-2017-10807 is a critical authentication bypass vulnerability in n/a, published on 4 Jul 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled.
Weakness: CWE-287
Which versions are affected by CVE-2017-10807?
It affects 1 product.
Linux distribution packages (12)
jabberd SUSE:Manager Proxy 3.0 | All versions | 2.6.1-4.6.1 |
jabberd SUSE:Manager Proxy 3.1 | All versions | 2.6.1-3.3.1 |
osad SUSE:Manager Proxy 3.1 | All versions | 5.11.80.3-2.3.1 |
rhnpush SUSE:Manager Proxy 3.1 | All versions | 5.5.104.3-2.3.2 |
spacewalk-backend SUSE:Manager Proxy 3.1 | All versions | 2.7.73.7-2.3.1 |
spacewalk-certs-tools SUSE:Manager Proxy 3.1 | All versions | 2.7.0.7-2.3.1 |
spacewalk-proxy SUSE:Manager Proxy 3.1 | All versions | 2.7.1.4-2.3.1 |
spacewalk-web SUSE:Manager Proxy 3.1 | All versions | 2.7.1.10-2.3.1 |
spacewalksd SUSE:Manager Proxy 3.1 | All versions | 5.0.26.3-2.3.1 |
supportutils-plugin-susemanager-client SUSE:Manager Proxy 3.1 | All versions | 3.1.2-2.3.1 |
zypp-plugin-spacewalk SUSE:Manager Proxy 3.1 | All versions | 0.9.16-2.3.1 |
jabberd SUSE:Manager Server 3.0 | All versions | 2.6.1-4.6.1 |
Products include Jabberd2 Jabberd2.
How do I fix CVE-2017-10807?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2017-10807 being exploited?
There is no known exploitation of CVE-2017-10807 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2017-10807, DSA-3902-1, GHSA-cv95-3vq8-8f64, SUSE-SU-2017:2266-1, SUSE-SU-2017:2267-1, UBUNTU-CVE-2017-10807.