CVE-2021-29655

CVE-2021-29655 affects Pexip Infinity Connect prior to 1.8.0, where provisioning authenticity checks are omitted. This can allow untrusted code to execute (remote code execution via network). Remediation: upgrade to 1.8.0 or later.

CVE-2021-29656

CVE-2021-29656 affects Pexip Infinity Connect (versions prior to 1.8.0). The root cause is improper TLS certificate validation and failure to properly check the allow list, as described in multiple sources. Impact is described as partial confidentiality, integrity, and availability losses (per CV...