PT-2021-21146
CVE-2021-36158
·
تاريخ النشر
2021-07-05
·
تاريخ التحديث
2021-07-08
الوصف من
CVSS 3.1
5.9
متوسطةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
xrdp versions through 3.14
Description:
The issue concerns man-in-the-middle attacks on RDP sessions due to the use of pre-generated RSA certificates and private keys in the xrdp package for Alpine Linux.
Recommendations:
For versions through 3.14, consider regenerating RSA certificates and private keys to prevent man-in-the-middle attacks. As a temporary workaround, restrict access to RDP sessions until a more secure configuration can be implemented.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾