CVE-2008-6508
CVSS Score Not Available
77.26%
HIGH RiskEPSS (99th percentile)
Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a .. (dot dot) in a URI that matches the Exclude-Strings list, as demonstrated by a /setup/setup-/.. sequence in a URI.
Published: 3/23/2009
Modified: 4/9/2025
Vulnerability Summary
EPSS Score (Exploitation Probability)
77.26%HIGH Exploitation Risk
99th percentile
This vulnerability has a 77.26% probability of being exploited in the next 30 days, ranking higher than 99% of all scored CVEs.