CVE Catalog
CVE-2017-10807
CriticalSummary
JabberD 2.x before version 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled.
Risk Assessment
This could lead to unauthorized access to the system, posing a serious threat to data and user security.
Recommendation
It is recommended to upgrade JabberD to version 2.6.1 or later to mitigate this security vulnerability.
Original NVD description (English source)
JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is not enabled.