CVE-2016-1232
The mod_dialback module in Prosody before 0.9.9 does not properly generate random values for the secret token for server-to-server dialback authentication, which makes it easier…
Published: 2016-01-12 · CVSS: Unscored
The mod_dialback module in Prosody before 0.9.9 does not properly generate random values for the secret token for server-to-server dialback authentication, which makes it easier for attackers to spoof servers via a brute force attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7