Lucene search
MitreCVELIST:CVE-2021-36382HistoryJul 12, 2021 - 1:04 p.m.
CVE-2021-36382
2021-07-1213:04:50
mitre
www.cve.org
3
devolutions server
vulnerability
cleartext
connections
intercept
private keys
man-in-the-middle
attack
CVSS3
2.6
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
4.5
Confidence
High
EPSS
0.001
Percentile
28.7%
Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack against the connections/partial endpoint (which accepts cleartext).
Related
nvd
nvd
CVE-2021-36382
2021-07-12 14:15:08
cve
cve
CVE-2021-36382
2021-07-12 14:15:08
prion
prion
Design/Logic Flaw
2021-07-12 14:15:00
CVSS3
2.6
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
AI Score
4.5
Confidence
High
EPSS
0.001
Percentile
28.7%
Related for CVELIST:CVE-2021-36382