Ubuntu notice covers jabberd2 flaw that allowed SASL ANONYMOUS login when disabled
VULNERABILITYredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
Ubuntu notice USN-8984-1 states that jabberd2 accepted SASL ANONYMOUS authentication even when the feature was not enabled in the configuration, which may allow a remote authentication bypass. The article gives no CVE identifier or affected versions. Defenders running jabberd2, especially on Ubuntu, should review the notice and apply the update it provides.
For security analysts · Written by AI from 1 source · Wrong?
What to do
- Check whether jabberd2 is installed on your systems.
- Review Ubuntu notice USN-8984-1 and apply the update it provides.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Ubuntu Security Notices