Описание
A cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was addressed by implementing the Secure Remote Password authentication protocol. This issue is fixed in Apple Remote Desktop 3.9. An attacker may be able to capture cleartext passwords.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.9 (исключая)
cpe:2.3:a:apple:remote_desktop:*:*:*:*:*:*:*:*
EPSS
Процентиль: 34%
0.0014
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-327
Связанные уязвимости
github
около 4 лет назад
A cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was addressed by implementing the Secure Remote Password authentication protocol. This issue is fixed in Apple Remote Desktop 3.9. An attacker may be able to capture cleartext passwords.
EPSS
Процентиль: 34%
0.0014
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-327