Xrdp · Xrdp · CVE-2021-36158
Name of the Vulnerable Software and Affected Versions:
xrdp versions through 3.14
Description:
The issue concerns man-in-the-middle attacks on RDP sessions due to the use of pre-generated RSA certificates and private keys in the xrdp package for Alpine Linux.
Recommendations:
For versions through 3.14, consider regenerating RSA certificates and private keys to prevent man-in-the-middle attacks. As a temporary workaround, restrict access to RDP sessions until a more secure configuration can be implemented.