Apache Guacamole Information Disclosure Vulnerability (CNVD-2020-41807)

Apache Guacamole is a clientless remote desktop gateway from the American Apache Apache Software Foundation. The product supports protocols such as VNC, RDP and SSH. A security vulnerability exists in Apache Guacamole 1.1.0 and earlier versions, which stems from the program not properly validatin...

PT-2020-5908 · Apache · Apache Guacamole

Name of the Vulnerable Software and Affected Versions: Apache Guacamole versions 1.1.0 and older Description: The issue is related to the mishandling of pointers involved in processing data received via RDP static virtual channels. If a user connects to a malicious or compromised RDP server, a...