PT-2015-7490
CVE-2015-7244
·
تاريخ النشر
2015-11-04
·
تاريخ التحديث
2015-11-04
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
MobaXterm versions prior to 8.3
Description
The default configuration of the server in MobaXterm has a disabled Access Control setting, which does not require authentication for X11 connections. This allows remote attackers to execute arbitrary commands or obtain sensitive information via X11 packets.
Recommendations
For versions prior to 8.3, enable the Access Control setting to require authentication for X11 connections.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾