ID:1447 - Exploit for Improper Authorization in Openfire - CVE-2015-7707

Link to public exploit:

Vulnerability description

The vulnerability allows a remote user to escalate privileges within the application.

The vulnerability exists due to the application does not validate user privileges when executing privileged actions. A remote authenticated user can set the "isadmin" HTTP GET parameter to value "on" in the request to the "/user-edit-form.jsp" URL and gain administrative permissions in the application.

Example:

http://[host]/user-edit-form.jsp?username=current_user&save=true&name=blasphemer&email=test@test.com&isadmin=on

Remediation