漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
Parallels Remote Application Server (RAS) 18 allows remote attackers to discover an intranet IP address because submission of the login form (even with blank credentials) provides this address to the attacker's client for use as a "host" value. In other words, after an attacker's web browser sent a request to the login form, it would automatically send a second request to a RASHTML5Gateway/socket.io URI with something like "host":"192.168.###.###" in the POST data.
漏洞信息
N/A
漏洞
N/A
漏洞
Parallels Remote Application Server 信息泄露漏洞
漏洞信息
Parallels Remote Application Server(RAS)是美国Parallels公司的一套应用程序交付兼VDI(虚拟桌面基础架构)解决方案。 Parallels Remote Application Server 存在安全漏洞,该漏洞允许远程攻击者发现一个内网IP地址,因为登录表单的提交(即使凭据是空白的)将这个地址提供给攻击者可利用该漏洞的客户端作为“host”值使用。
漏洞信息
N/A
漏洞
N/A