CVE-2020-8968: Parallels Remote Application Server credentials management errors
Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS. The confidentiality, availability and integrity of the information of the user could be compromised if an attacker is able to recover the profile password.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2020-8968?
CVE-2020-8968 is a vulnerability in Parallels Remote Application Server (RAS) that allows a local attacker to retrieve certain profile passwords in clear text format.
How can an attacker exploit CVE-2020-8968?
An attacker can exploit CVE-2020-8968 by uploading a previously stored cyphered file by Parallels RAS to retrieve the profile passwords in clear text format.
What is the impact of CVE-2020-8968?
The confidentiality, availability, and integrity of the user's information could be compromised if an attacker successfully exploits CVE-2020-8968.
What is the severity of CVE-2020-8968?
CVE-2020-8968 has a severity rating of 7.1 (high).
Is there a fix for CVE-2020-8968?
Yes, it is recommended to update to a version of Parallels Remote Application Server (RAS) that is higher than 17.0 to mitigate the vulnerability.