CVE-2020-9497 vulnerability in Apache and Other Products
Published on July 2, 2020
Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels. If a userconnects to a malicious or compromised RDP server, specially-craftedPDUs could result in disclosure of information within the memory ofthe guacd process handling the connection.
Products Associated with CVE-2020-9497
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-9497 are published in these products:
Exploit Probability
EPSS
0.08%
Percentile
24.13%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.