CVE-2021-2221: Critical severity tarantella secure global desktop vulnerability

Published Apr 22, 2021

Updated

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global Desktop. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Secure Global Desktop, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Secure Global Desktop.

Affected Software

1 affected component

Oracle Secure Global Desktop=5.6

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuapr2021.html

Event History

Apr 22, 2021

CVE Published

via MITRE·09:53 PM

Data Sourced

via MITRE·09:53 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-2221?

The severity of CVE-2021-2221 is critical with a severity value of 9.6.

What is the affected version of Oracle Secure Global Desktop for CVE-2021-2221?

The affected version of Oracle Secure Global Desktop for CVE-2021-2221 is 5.6.

How can an unauthenticated attacker exploit CVE-2021-2221?

An unauthenticated attacker with network access via multiple protocols can easily exploit CVE-2021-2221.

What can an attacker compromise with CVE-2021-2221?

An attacker can compromise Oracle Secure Global Desktop with CVE-2021-2221.

Where can I find more information about CVE-2021-2221?

More information about CVE-2021-2221 can be found at the following URL: https://www.oracle.com/security-alerts/cpuapr2021.html