Velneo vClient Improper authentication
CVE-2021-45035

6.3MEDIUM

Key Information:

Vendor

Velneo

Status
Velneo Vclient
Vendor
CVE Published:
23 September 2022

What is CVE-2021-45035?

Velneo vClient on its 28.1.3 version, does not correctly check the certificate of authenticity by default. This could allow an attacker that has access to the network to perform a MITM attack in order to obtain the user´s credentials.

Affected Version(s)

Velneo vClient 28.1.3

References

https://www.incibe-cert.es/en/early-warning/security-advi...
x_refsource_CONFIRM
https://velneo.es/publicacion-de-incidencia-de-seguridad-...
x_refsource_CONFIRM
https://www.velneo.com/blog/nueva-revision-velneo-29-2
x_refsource_MISC

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.