We're updating the issue view to help you get more done. 

Users In Another Domain Could Set The vCard of an Openfire User

Description

Currently, when a vCard set is received no checking is done on the domain of the sending user to ensure that the user submitting a request is a local user. This needs to be done so that the vCard of the local user cannot be overwritten by a user of another domain.

Environment

None

Acceptance Test - Entry

None

Assignee

Alex Wenckus

Reporter

Alex Wenckus

Labels

None

Expected Effort

None

Ignite Forum URL

None

Components

Fix versions

Priority

Minor
Configure