| Package | Affected versions | Patched versions |
|---|---|---|
| xrdp | < 0.10.6.1 | 0.10.6.1 |
xrdp is an open source RDP server. Versions 0.10.6 and prior contain a timing side-channel vulnerability in the login interface. Due to a discrepancy in response processing times, a remote attacker can infer the existence of a username on the system, leading to unauthorized information disclosure via username enumeration. This issue has been fixed in version 0.10.6.1.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free