system
Describe <CVE-2009-1595>.
user
What is <CVE-2009-1595>?
assistant
The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire before 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action..