CVE-2014-8779

CVE-2014-8779 affects Pexip Infinity prior to v8, where non-unique SSH host keys are used across different installations. Root cause: fixed/static host keys embedded in images allow an attacker with network access to impersonate a Pexip Infinity node and perform MITM SSH sessions, potentially cap...

CVE-2014-8779: SSH Host keys on Pexip Infinity

Summary ======= The operating system used by Pexip Infinity does not create unique SSH host keys on deployment of new Management and Conferencing Nodes, using fixed host keys instead. Host keys are used to verify the identity of the remote host when connecting to it over SSH. These keys are...

Pexip Infinity static ssh keys

Static ssh key is used on nodes creation...

Pexip Infinity Man-in-the-Middle Security Bypass Vulnerability

Pexip Infinity is a video conferencing cloud collaboration platform. A security bypass vulnerability exists in Pexip Infinity that allows attackers to conduct man-in-the-middle attacks to gain access to sensitive information...