CVE-2021-45036

Velneo vClient 28.1.3 is affected by an improper authentication issue where an attacker who knows a victim’s username and hashed password can spoof the victim’s ID against the server. The CVE-2021-45036 entry notes high impact (confidentiality and integrity) with network attack vector and no user...

CVE-2021-45035

Velneo vClient 28.1.3 is affected: it does not correctly check certificate authenticity by default, enabling potential MITM and credential exposure on network access. Root cause: default certificate validation behavior. Impact: credential compromise via MITM. Remediation: update Velneo vClient an...