CVE-2020-8968

Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS. The confidentiality, availability and integrity of the information of the user could be compromised if an attacker is able to recover the profile password.

Score

CVSS 3.1 7.1 High

Status

Modified - cve-coordination@incibe.es

Published

2021-12-17

Last modified

2024-09-17

Weaknesses

CWE-255

Affected products

• Parallels Remote Application Server Client (Parallels)
• Remote Application Server (Parallels)

References

• https://www.incibe.es/en/incibe-cert/notices/aviso/parallels-remote-application-server-credentials-management-errors