CVE-2021-36158

Name of the Vulnerable Software and Affected Versions: xrdp versions through 3.14

Description: The issue concerns man-in-the-middle attacks on RDP sessions due to the use of pre-generated RSA certificates and private keys in the xrdp package for Alpine Linux.

Recommendations: For versions through 3.14, consider regenerating RSA certificates and private keys to prevent man-in-the-middle attacks. As a temporary workaround, restrict access to RDP sessions until a more secure configuration can be implemented.