Lucene search
HistoryNov 04, 2015 - 3:59 a.m.
CVE-2015-7244
mobaxterm
cve-2015-7244
security vulnerability
access control
authentication
x11 connections
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.7%
The default configuration of the server in MobaXterm before 8.3 has a disabled Access Control setting and consequently does not require authentication for X11 connections, which allows remote attackers to execute arbitrary commands or obtain sensitive information via X11 packets.
Affected configurations
Node
mobatekmobaxtermRange≤8.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| mobatek:mobaxterm | mobatek mobaxterm | le | 8.2 |
Related
nessus
nessus
Mobatek MobaXterm < 8.3 (CVE-2015-7244)
2024-03-15 00:00:00
nvd
nvd
CVE-2015-7244
2015-11-04 03:59:12
cvelist
cvelist
CVE-2015-7244
2015-11-04 02:00:00
cert
cert
prion
prion
Default configuration
2015-11-04 03:59:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.7%
Related for CVE-2015-7244