Описание
In the xrdp package (in branches through 3.14) for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.14 (включая)
cpe:2.3:a:alpinelinux:aports:*:*:*:*:*:alpine:*:*
EPSS
Процентиль: 25%
0.00085
Низкий
5.9 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-312
Связанные уязвимости
CVSS3: 5.9
ubuntu
больше 4 лет назад
In the xrdp package (in branches through 3.14) for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used.
CVSS3: 5.9
debian
больше 4 лет назад
In the xrdp package (in branches through 3.14) for Alpine Linux, RDP s ...
github
больше 3 лет назад
In the xrdp package (in branches through 3.14) for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used.
EPSS
Процентиль: 25%
0.00085
Низкий
5.9 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-312