← Back

CVE-2013-6838

nvd nist
Published: Jan 28, 2014Modified: Apr 29, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000) 9.0.3 (rel903), when using OpenVZ and fallback customization, uses the same SSH private key across different customers' installations, which allows remote attackers to gain privileges by leveraging knowledge of this key.

Affected (1)

Enghouseinteractive
1 product
Ivr Pro
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ivr Pro
Version 9.0.3
Running on/withPlatform Versions
Openvz
Vzkernel
All versions

Related CWEs

CWE-310
CWE-310

References (4)

Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.