Логотип exploitDog
bind: "CVE-2022-24883"
Консоль
Логотип exploitDog

exploitDog

bind: "CVE-2022-24883"

Количество 9

Количество 9

ubuntu логотип

CVE-2022-24883

около 3 лет назад

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left.

CVSS3: 7.4
EPSS: Низкий
redhat логотип

CVE-2022-24883

около 3 лет назад

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left.

CVSS3: 9.8
EPSS: Низкий
nvd логотип

CVE-2022-24883

около 3 лет назад

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left.

CVSS3: 7.4
EPSS: Низкий
debian логотип

CVE-2022-24883

около 3 лет назад

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). ...

CVSS3: 7.4
EPSS: Низкий
fstec логотип

BDU:2022-06851

около 3 лет назад

Уязвимость RDP-сервера FreeRDP, связанная с недостатками процедуры аутентификации, позволяющая нарушителю обойти процесс аутентификации

CVSS3: 9.8
EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2354-1

почти 3 года назад

Security update for freerdp

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2353-1

почти 3 года назад

Security update for freerdp

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2022:2352-1

почти 3 года назад

Security update for freerdp

EPSS: Низкий
redos логотип

ROS-20241210-01

7 месяцев назад

Множественные уязвимости freerdp

CVSS3: 9.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2022-24883

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left.

CVSS3: 7.4
0%
Низкий
около 3 лет назад
redhat логотип
CVE-2022-24883

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left.

CVSS3: 9.8
0%
Низкий
около 3 лет назад
nvd логотип
CVE-2022-24883

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). Prior to version 2.7.0, server side authentication against a `SAM` file might be successful for invalid credentials if the server has configured an invalid `SAM` file path. FreeRDP based clients are not affected. RDP server implementations using FreeRDP to authenticate against a `SAM` file are affected. Version 2.7.0 contains a fix for this issue. As a workaround, use custom authentication via `HashCallback` and/or ensure the `SAM` database path configured is valid and the application has file handles left.

CVSS3: 7.4
0%
Низкий
около 3 лет назад
debian логотип
CVE-2022-24883

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). ...

CVSS3: 7.4
0%
Низкий
около 3 лет назад
fstec логотип
BDU:2022-06851

Уязвимость RDP-сервера FreeRDP, связанная с недостатками процедуры аутентификации, позволяющая нарушителю обойти процесс аутентификации

CVSS3: 9.8
0%
Низкий
около 3 лет назад
suse-cvrf логотип
SUSE-SU-2022:2354-1

Security update for freerdp

почти 3 года назад
suse-cvrf логотип
SUSE-SU-2022:2353-1

Security update for freerdp

почти 3 года назад
suse-cvrf логотип
SUSE-SU-2022:2352-1

Security update for freerdp

почти 3 года назад
redos логотип
ROS-20241210-01

Множественные уязвимости freerdp

CVSS3: 9.8
7 месяцев назад

Уязвимостей на страницу