CVE-2021-2248: Critical severity tarantella secure global desktop vulnerability

Published Apr 22, 2021

Updated

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global Desktop. While the vulnerability is in Oracle Secure Global Desktop, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Secure Global Desktop.

Affected Software

1 affected component

Oracle Secure Global Desktop=5.6

Remediation

Patch Available

https://www.oracle.com/security-alerts/cpuapr2021.html

Event History

Apr 22, 2021

CVE Published

via MITRE·09:53 PM

Data Sourced

via MITRE·09:53 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-2248?

The severity of CVE-2021-2248 is critical.

What is the affected software for CVE-2021-2248?

The affected software for CVE-2021-2248 is Oracle Secure Global Desktop version 5.6.

How can an attacker exploit CVE-2021-2248?

An unauthenticated attacker with network access via multiple protocols can exploit CVE-2021-2248.

What is the fix for CVE-2021-2248?

To fix CVE-2021-2248, update Oracle Secure Global Desktop to a version that is not affected by this vulnerability.

Where can I find more information about CVE-2021-2248?

You can find more information about CVE-2021-2248 on the Oracle Security Alerts page.