Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-26xv-5c8j-w237

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key.

An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key.

EPSS

Процентиль: 71%
0.01326
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 10 лет назад

An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key.

CVSS3: 9.8
nvd
почти 10 лет назад

An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key.

CVSS3: 9.8
debian
почти 10 лет назад

An issue was discovered in xrdp before 0.9.1. When successfully loggin ...

CVSS3: 9.8
altlinux
больше 9 лет назад

ALT-PU-2017-1555: package `xrdp` update to version 0.9.2-alt1

suse-cvrf
больше 7 лет назад

Security update for xrdp

EPSS

Процентиль: 71%
0.01326
Низкий

9.8 Critical

CVSS3