Termide Virtual Workstations Dispatching System Privilege Escalation

The vulnerability of the session agent component of the “Termide Virtual Desktops Connection Manager” software is related to the lack of protective measures for the request structure. Exploiting this vulnerability allows a malicious actor to enhance their privileges through specially crafted...

Termide Virtual Desktops Connection Manager Authentication Bypass

The vulnerability of the “Termide Virtual Desktops Connection Manager” software server is related to the improper processing of X-Forwarded-For HTTP requests. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures remotely...

Termide Virtual Desktops Connection Manager Path Traversal

The vulnerability of the “Termide Virtual Desktops Connection Manager” software complex is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to any file in the file system by...

Termide Virtual Desktops Connection Monitor Privilege Escalation

The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent is related to the lack of protective measures for the request structure. Exploiting this vulnerability can allow attackers to enhance their privileges by using specially crafted authorized HTTP requests...

Termide Virtual Desktops Connection Monitor Code Execution

The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent is related to the lack of protective measures for the request structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Termide Virtual Desktops Connection Monitor Code Execution

The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent is related to the lack of protective measures for the request structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Termide Virtual Desktops Connection Manager Disclosure

The vulnerability of the “Termide Virtual Desktops Connection Manager” software suite is related to deficiencies in the testing mechanisms for integrations. Exploiting this vulnerability allows a malicious actor to disclose sensitive information...

Termide Virtual Desktops Connection Manager Path Bypass

The vulnerability of the "Termide Virtual Desktops Connection Manager" software server is related to an incorrect limitation on the path to the restricted access catalog. Exploitation of this vulnerability allows a malicious actor to perform attacks by bypassing the specified path...

Termide Virtual Desktops Connection Monitor Privilege Escalation

The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent is related to the lack of protective measures for the request structure. Exploiting this vulnerability allows a malicious actor to enhance their privileges by using specially crafted authorized HTTP requests...

Termide Virtual Desktops Connection Monitor IPC Interception

The vulnerability of the “Termide Virtual Desktops Connection Monitor” software agent is related to the lack of protective measures for the request structure. Exploiting this vulnerability allows a remote attacker to intercept the IPC socket...

Termide Virtual Desktops Connection Manager Privilege Escalation

The vulnerability of the “Termide Virtual Desktops Connection Manager” software suite is related to errors in user permission allocation. Exploiting this vulnerability allows a malicious actor to remotely execute commands like qemu-monitor...

Termide Virtual Desktops Connection Manager XSS

The vulnerability of the software interface “Termide Virtual Desktops Connection Manager” is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Termide Virtual Desktops Connection Manager Authentication Bypass

The vulnerability of the “Termide Virtual Desktops Connection Manager” software server is related to an authentication error based on the Kerberos protocol. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to user account credentials...