Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Pexip Infinity before 8 uses the same SSH host keys across different customers' installations, which allows man-in-the-middle attackers to spoof Management and Conferencing Nodes by leveraging these keys.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Pexip Infinity 权限许可和访问控制漏洞
Vulnerability Description
Pexip Infinity是挪威派视普（Pexip）公司的一套虚拟视频会议云协作平台。该平台能够与基于标准协议（H.323、SIP）的视频会议终端和视频会议基础架构协同运行，并具有节省广域网带宽等特点。 Pexip Infinity 8之前版本中存在安全漏洞，该漏洞源于程序在不同的用户安装中使用相同的SSH主机密钥。攻击者可借助这些密钥利用该漏洞实施中间人攻击，伪造Management and Conferencing Nodes。
CVSS Information
N/A
Vulnerability Type
N/A