CVE-2017-2488

Name of the Vulnerable Software and Affected Versions Apple Remote Desktop versions prior to 3.9

Description A cryptographic weakness existed in the authentication protocol of Remote Desktop, allowing an attacker to potentially capture cleartext passwords. This issue was addressed by implementing the Secure Remote Password authentication protocol.

Recommendations For Apple Remote Desktop versions prior to 3.9, update to Apple Remote Desktop 3.9 to resolve the issue. As a temporary workaround, consider restricting access to Remote Desktop until the update is applied.