CVE-2021-36382
First published: Mon Jul 12 2021(Updated: )
Devolutions Server before 2021.1.18, and LTS before 2020.3.20, allows attackers to intercept private keys via a man-in-the-middle attack against the connections/partial endpoint (which accepts cleartext).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Devolutions Devolutions Server | <2020.3.20 | |
| Devolutions Devolutions Server | <2021.1.18 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2021-36382.
What is the affected software?
The affected software is Devolutions Server before 2021.1.18 and LTS before 2020.3.20.
How can attackers exploit this vulnerability?
Attackers can exploit this vulnerability by conducting a man-in-the-middle attack against the connections/partial endpoint, which accepts cleartext, in order to intercept private keys.
What is the severity of CVE-2021-36382?
The severity of CVE-2021-36382 is medium with a score of 3.7.
How can I fix this vulnerability?
To fix this vulnerability, it is recommended to update Devolutions Server to version 2021.1.18 or LTS version 2020.3.20.
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/devolutions
- canonical/devolutions devolutions server