CVE-2017-5858 — MEDIUM (5.9)

Vulnerability Description

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for Converse.js (0.8.0 - 1.0.6, 2.0.0 - 2.0.4).

CVSS Score

5.9

MEDIUM

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

NONE

Affected Products

Vendor	Product	Versions
Conversejs	Converse.Js	0.8.0

Related Weaknesses (CWE)

CWE-20 CWE-346

References

http://openwall.com/lists/oss-security/2017/02/09/29ExploitMailing ListThird Party Advisory
http://www.securityfocus.com/bid/96183
https://github.com/jcbrand/converse.js/commit/42f249cabbbf5c026398e6d3b350f6f953Patch
https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/ExploitTechnical DescriptionThird Party Advisory
https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdExploitTechnical DescriptionThird Party Advisory
http://openwall.com/lists/oss-security/2017/02/09/29ExploitMailing ListThird Party Advisory
http://www.securityfocus.com/bid/96183
https://github.com/jcbrand/converse.js/commit/42f249cabbbf5c026398e6d3b350f6f953Patch
https://rt-solutions.de/en/2017/02/CVE-2017-5589_xmpp_carbons/ExploitTechnical DescriptionThird Party Advisory
https://rt-solutions.de/wp-content/uploads/2017/02/CVE-2017-5589_xmpp_carbons.pdExploitTechnical DescriptionThird Party Advisory

FAQ

What is CVE-2017-5858?

CVE-2017-5858 is a vulnerability with a CVSS score of 5.9 (MEDIUM). An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This ...

How severe is CVE-2017-5858?

CVE-2017-5858 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-5858?

Check the references section above for vendor advisories and patch information. Affected products include: Conversejs Converse.Js.