Possible security issue (event system)
Hi Michael,
since it is possible to set custom events for devices without requiring the admin password (e.g., using the Windows client), there's a possibility of hijacking a server connected to the same LAN without knowing the password just by launching the VirtualHere client and setting a custom event handler to launch a malicious script (changing a password, rebooting the server, etc.) on a device and just waiting for the event to eventually happen.
- Read more about Possible security issue (event system)
- 4 comments
- Log in or register to post comments