Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Maxice8

#44411of 53,622
5.9Total CVSS
Vulnerabilities · 1
PT-2021-21146
5.9
2021-07-05
Xrdp · Xrdp · CVE-2021-36158
Name of the Vulnerable Software and Affected Versions: xrdp versions through 3.14 Description: The issue concerns man-in-the-middle attacks on RDP sessions due to the use of pre-generated RSA certificates and private keys in the xrdp package for Alpine Linux. Recommendations: For versions through 3.14, consider regenerating RSA certificates and private keys to prevent man-in-the-middle attacks. As a temporary workaround, restrict access to RDP sessions until a more secure configuration can be implemented.