CVE-2015-7244

The default configuration of the server in MobaXterm before 8.3 has a disabled Access Control setting and consequently does not require authentication for X11…

published November 4, 2015

CVSS
—
EPSS
5%
Percentile
92.2
In the wild
Unconfirmed
What it is

The default configuration of the server in MobaXterm before 8.3 has a disabled Access Control setting and consequently does not require authentication for X11 connections, which allows remote attackers to execute arbitrary commands or obtain sensitive information via X11 packets.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05049 · 92.2th percentile
Published
2015-11-04T02:00Z
EPSS history
Timeline
  • 04 NOV 02:00Z
    The default configuration of the server in MobaXterm before 8.3 has a disabled Access Control setting and consequently does not require authentication for X11…
    cvelistv5