Search results
Hace 1 día · Citrix ha emitido una advertencia a sus usuarios sobre una vulnerabilidad significativa en el cliente SSH PuTTY incluido con XenCenter para Citrix Hypervisor 8.2 CU1 LTSR, que podría permitir a los atacantes acceder a claves SSH privadas de los administradores de XenCenter. La vulnerabilidad, identificada como CVE-2024-31497, afecta a varias ...
Hace 1 día · Para abordar este problema, Citrix ha eliminado el componente PuTTY de las versiones posteriores a XenCenter 8.2.6, y confirmó que las futuras versiones no lo incluirán. Además, se aconseja a los administradores que mitiguen el riesgo descargando e instalando la última versión de PuTTY en lugar de la que viene integrada con XenCenter.
Hace 6 días · You can find out more about public/private keys here. In our case we'll just generate such pair, keeping the private key to yourself. The public key will be put as a trusted key on all your SSH accounts. Then we'll setup PuTTY client to use private key for authentication for all web hosting services.
Hace 8 horas · The issue pertains to versions of PuTTY before 0.81: under certain scenarios, in conjunction with XenCenter, the vulnerability allows an attacker, who controls a guest virtual machine, to deduce the XenCenter administrator’s private SSH key, according to Citrix specialists.
Hace 1 día · According to Citrix, the PuTTY third-party component was eliminated in XenCenter 8.2.6 and will not be present in any further releases. In certain situations, this vulnerability could enable an attacker in control of a guest virtual machine (VM) to ascertain the SSH private key of a XenCenter administrator, who would then use that key to authenticate to the guest VM via an SSH connection.
Hace 2 días · Citrix has released a security bulletin detailing a critical vulnerability (CVE-2024-31497) affecting certain versions of their Citrix Hypervisor virtualization platform. The issue stems from the inclusion of a vulnerable version of the popular PuTTY SSH client in XenCenter, the management console for Citrix Hypervisor.
Hace 2 días · Citrix says that the PuTTY third-party component has been removed starting with XenCenter 8.2.6, and any versions after 8.2.7 will no longer include it.
