PT-2021-21146 · Xrdp · Xrdp

Maxice8 · Published 2021-07-05 · Updated 2021-07-08 · CVE-2021-36158

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: xrdp versions through 3.14

Description: The issue concerns man-in-the-middle attacks on RDP sessions due to the use of pre-generated RSA certificates and private keys in the xrdp package for Alpine Linux.

Recommendations: For versions through 3.14, consider regenerating RSA certificates and private keys to prevent man-in-the-middle attacks. As a temporary workaround, restrict access to RDP sessions until a more secure configuration can be implemented.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2021-36158

Affected Products

Xrdp

References · 8

• https://osv.dev/vulnerability/ALPINE-CVE-2021-36158 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36158 · Security Note
• https://gitlab.alpinelinux.org/alpine/aports/-/issues/12811 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-36158 · Vendor Advisory
• https://security.alpinelinux.org/vuln/CVE-2021-36158 · Note
• https://t.me/cvenotify/17105 · Telegram Post
• https://t.me/cibsecurity/25919 · Telegram Post
• https://t.me/cvenotify/17078 · Telegram Post