Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-26xv-5c8j-w237

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key.

An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key.

EPSS

Процентиль: 57%
0.00349
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 8 лет назад

An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key.

CVSS3: 9.8
nvd
больше 8 лет назад

An issue was discovered in xrdp before 0.9.1. When successfully logging in using RDP into an xrdp session, the file ~/.vnc/sesman_${username}_passwd is created. Its content is the equivalent of the user's cleartext password, DES encrypted with a known key.

CVSS3: 9.8
debian
больше 8 лет назад

An issue was discovered in xrdp before 0.9.1. When successfully loggin ...

suse-cvrf
около 6 лет назад

Security update for xrdp

suse-cvrf
около 6 лет назад

Security update for xrdp

EPSS

Процентиль: 57%
0.00349
Низкий

9.8 Critical

CVSS3