{"uuid": "7c6e9d71-d405-4b5b-9a00-e7cb6ab798db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-6508", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/openfire_auth_bypass.rb", "content": "{\"aliases\": [], \"arch\": \"java, x86\", \"author\": [\"Andreas Kurtz\", \"h0ng10\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an authentication bypass vulnerability in the administration\\n          console of Openfire servers. By using this vulnerability it is possible to\\n          upload/execute a malicious Openfire plugin on the server and execute arbitrary Java\\n          code. This module has been tested against Openfire 3.6.0a.\\n\\n          It is possible to remove the uploaded plugin after execution, however this might turn\\n          the server in some kind of unstable state, making re-exploitation difficult. You might\\n          want to do this manually.\", \"disclosure_date\": \"2008-11-10\", \"fullname\": \"exploit/multi/http/openfire_auth_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"Openfire Admin Console Authentication Bypass\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/openfire_auth_bypass.rb\", \"platform\": \"Java,Linux,Windows\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/openfire_auth_bypass\", \"references\": [\"CVE-2008-6508\", \"OSVDB-49663\", \"BID-32189\", \"EDB-7075\", \"URL-http://community.igniterealtime.org/thread/35874\"], \"rport\": 9090, \"session_types\": false, \"targets\": [\"Java Universal\", \"Windows x86 (Native Payload)\", \"Linux x86 (Native Payload)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:05.561970Z"}