PT-2023-27343 · Pexip · Pexip Vmr

CVE-2023-40236

Publicado

2023-12-25

Atualizado

2023-12-29

CVSS v3.1

5.3

Média

Vetor

AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Pexip VMR self-service portal versions prior to 3

Description The issue allows authentication bypass due to the use of the same SSH host key across different customers' installations.

Recommendations For versions prior to 3, update to version 3 or later to resolve the issue.

Correção

Using Hardcoded Credentials

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2023-40236

Pexip Vmr