Vulnerabilities > CVE-2021-32917 - Missing Authorization vulnerability in multiple products

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

LOW

network

low complexity

NVD

Published: 2021-05-13

Updated: 2023-11-07

Summary

An issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by default, even if neither of the users has an XMPP account on the local server, allowing unrestricted use of the server's bandwidth.

Vulnerable Configurations

Part	Description	Count
Application	Prosody Prosody Prosody - Prosody Prosody 0.1.0 Prosody Prosody 0.2.0 Prosody Prosody 0.3.0 Prosody Prosody 0.4.0 Prosody Prosody 0.4.1 Prosody Prosody 0.4.2 Prosody Prosody 0.5.0 Prosody Prosody 0.5.1 Prosody Prosody 0.5.2 Prosody Prosody 0.6.0 Prosody Prosody 0.6.1 Prosody Prosody 0.6.2 Prosody Prosody 0.7.0 Prosody Prosody 0.8.0 Prosody Prosody 0.8.1 Prosody Prosody 0.8.2 Prosody Prosody 0.9.0 Prosody Prosody 0.9.1 Prosody Prosody 0.9.2 Prosody Prosody 0.9.3 Prosody Prosody 0.9.4 Prosody Prosody 0.9.5 Prosody Prosody 0.9.6 Prosody Prosody 0.9.7 Prosody Prosody 0.9.8 Prosody Prosody 0.9.9 Prosody Prosody 0.9.10 Prosody Prosody 0.9.11 Prosody Prosody 0.9.12 Prosody Prosody 0.9.13 Prosody Prosody 0.9.14 Prosody Prosody 0.10.0 Prosody Prosody 0.10.1 Prosody Prosody 0.10.2 Prosody Prosody 0.10.3 Prosody Prosody 0.11.0 Prosody Prosody 0.11.1 Prosody Prosody 0.11.2 Prosody Prosody 0.11.3 Prosody Prosody 0.11.4 Prosody Prosody 0.11.5 Prosody Prosody 0.11.6 Prosody Prosody 0.11.7 Prosody Prosody 0.11.8	45
OS	Debian Debian Debian Linux 9.0 Debian Debian Linux 10.0	2
OS	Fedoraproject Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34	3

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References