CVE-2017-2488
First published: Tue Feb 21 2017(Updated: )
A cryptographic weakness existed in the authentication protocol of Remote Desktop. This issue was addressed by implementing the Secure Remote Password authentication protocol. This issue is fixed in Apple Remote Desktop 3.9. An attacker may be able to capture cleartext passwords.
Credit: CVE-2017-2488 product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple Apple Remote Desktop | <3.9 | 3.9 |
| Apple Remote Desktop | <3.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://support.apple.com/en-us/HT207622 (Advisory)
- collector/apple-support
- collector/nvd-index
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/weakness
- agent/references
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/apple
- canonical/apple apple remote desktop
- canonical/apple remote desktop