Users In Another Domain Could Set The vCard of an Openfire User

Description

Currently, when a vCard set is received no checking is done on the domain of the sending user to ensure that the user submitting a request is a local user. This needs to be done so that the vCard of the local user cannot be overwritten by a user of another domain.

Environment

None

Activity

Show:
Fixed

Details

Assignee

Reporter

Components

Fix versions

Priority

Created June 8, 2007 at 11:02 AM
Updated June 9, 2007 at 1:02 AM
Resolved June 9, 2007 at 1:02 AM

Flag notifications