Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Parallels Remote Application Server credentials management errors
Vulnerability Description
Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS. The confidentiality, availability and integrity of the information of the user could be compromised if an attacker is able to recover the profile password.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Vulnerability Type
凭证管理
Vulnerability Title
Parallels Remote Application Server 安全漏洞
Vulnerability Description
Parallels Remote Application Server（RAS）是美国Parallels公司的一套应用程序交付兼VDI（虚拟桌面基础架构）解决方案。 Parallels Remote Application Server (RAS) 存在安全漏洞，该漏洞源于允许本地攻击者通过上传 Parallels RAS 先前存储的加密文件，以明文格式检索某些配置文件密码。 如果攻击者能够恢复配置文件密码，则用户信息的机密性、可用性和完整性可能会受到损害。
CVSS Information
N/A
Vulnerability Type
N/A