CVE-2013-6838: Critical severity Enghouseinteractive Ivr Pro vulnerability
An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000) 9.0.3 (rel903), when using OpenVZ and fallback customization, uses the same SSH private key across different customers' installations, which allows remote attackers to gain privileges by leveraging knowledge of this key.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6838?
The severity of CVE-2013-6838 is rated as critical, with a CVSS score of 10.
How do I fix CVE-2013-6838?
To mitigate CVE-2013-6838, ensure that each customer installation uses a unique SSH private key.
What vulnerability does CVE-2013-6838 exploit?
CVE-2013-6838 exploits the use of the same SSH private key across different installations of Enghouse Interactive IVR Pro.
Who is affected by CVE-2013-6838?
CVE-2013-6838 affects customers using the Enghouse Interactive IVR Pro version 9.0.3 with OpenVZ and fallback customization.
What are the potential impacts of CVE-2013-6838?
CVE-2013-6838 can allow remote attackers to gain elevated privileges on affected systems.