CVE-2015-7244: High severity mobaxterm vulnerability
The default configuration of the server in MobaXterm before 8.3 has a disabled Access Control setting and consequently does not require authentication for X11 connections, which allows remote attackers to execute arbitrary commands or obtain sensitive information via X11 packets.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7244?
CVE-2015-7244 has a high severity due to the risk of remote attackers executing arbitrary commands and obtaining sensitive information.
How do I fix CVE-2015-7244?
To fix CVE-2015-7244, upgrade to MobaXterm version 8.3 or later where the Access Control setting for X11 is enabled by default.
What systems are affected by CVE-2015-7244?
CVE-2015-7244 affects MobaXterm versions prior to 8.3.
What type of attack can be performed using CVE-2015-7244?
Using CVE-2015-7244, remote attackers can execute arbitrary commands and access sensitive data through unprotected X11 connections.
Is user authentication required for X11 connections in CVE-2015-7244?
No, the default configuration for X11 connections in MobaXterm versions before 8.3 does not require user authentication, making it vulnerable.