7.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
0.006 Low
EPSS
Percentile
78.7%
Velneo vClient on its 28.1.3 version, could allow an attacker with knowledge of the victims’s username and hashed password to spoof the victim’s id against the server.
doc.velneo.com/v/32/velneo-vserver/funcionalidades/protocolo-vatps
doc.velneo.com/v/32/velneo/funcionalidades-comunes/conexion-con-velneo-vserver
doc.velneo.com/v/32/velneo/notas-de-la-version#a-partir-de-esta-version-todos-los-servidores-arrancaran-con-protocolo-vatps
doc.velneo.com/v/32/velneo/notas-de-la-version#mejoras-de-seguridad-en-validacion-de-usuario-y-contrasena
velneo.es/mivelneo/listado-de-cambios-velneo-32/
www.incibe.es/en/incibe-cert/notices/aviso/velneo-vclient-improper-authentication-0
www.velneo.com/blog/disponible-la-nueva-version-velneo-32