UPDATE PATCH [RDP Proxy IDOR Vulnerability]

description a security vulnerability known as idor (insecure direct object reference) has been discovered in remote desktop protocol (rdp) connections this vulnerability allowed unauthorized access to target devices by manipulating the encoded url used in the connection to exploit this vulnerability, all information in the encoded url and the values stored in single connect had to be correct and in the correct order affected release single connect 2 16 resolution immediate action was taken to resolve the issue and the problem was fixed in the single connect 2 16 1 release the resolution involved addressing the vulnerability and implementing measures to prevent a similar situation from happening in future releases the quick response to this vulnerability ensured that the security of rdp connections was maintained, and users could continue using the service without any interruption update instructions to update the rdp package and copy it to the correct path, follow these steps download the latest rdp package from this link https //filerepo krontech com/index php/s/vqrlyxpzsecp3uu (md5sum 6fea2b58915854b663f43fdf4516522a) @ copy the package to single connect server open a terminal, stop the web server application using the following command systemctl stop netright tomcat navigate to the directory where the package is uploaded extract the contents of the package using the following command tar xvzf rdp fix tar gz navigate to the extracted directory using the following command cd rdp fix copy the contents of the extracted directory to the related path using the following command cp rdp ui war /u01/netright tomcat/webapp restart the web server application using the following command systemctl start netright tomcat verify the installation by accessing the target server using rdp proxy