Beveiligingsadvies

CVE-2013-6838

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-01-28 00:00:00
Laatst bijgewerkt 2024-08-06 17:46:23
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000) 9.0.3 (rel903), when using OpenVZ and fallback customization, uses the same SSH private key across different customers' installations, which allows remote attackers to gain privileges by leveraging knowledge of this key.