vulnerability

Debian: CVE-2020-9497: guacamole-server -- security update

Severity
1
CVSS
(AV:L/AC:H/Au:N/C:P/I:N/A:N)
Published
Jul 2, 2020
Added
Nov 9, 2020
Modified
Nov 9, 2020

Description

Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels. If a userconnects to a malicious or compromised RDP server, specially-craftedPDUs could result in disclosure of information within the memory ofthe guacd process handling the connection.

Solution

debian-upgrade-guacamole-server
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.