CVEvulnerability

CVE-2013-6838

10.0 HIGH Published 2014-01-28 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2014-01-28
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-310

Description

An unspecified Enghouse Interactive Professional Services "addon product" in Enghouse Interactive IVR Pro (VIP2000) 9.0.3 (rel903), when using OpenVZ and fallback customization, uses the same SSH private key across different customers' installations, which allows remote attackers to gain privileges by leveraging knowledge of this key.

Affected configurations

• enghouseinteractive ivr pro 9.0.3

Weakness · not in database (1)

CWE-310

References

http://seclists.org/fulldisclosure/2014/Jan/103 seclists.org
https://xpd.se/advisories/XPD-2013-001.txt xpd.se
http://seclists.org/fulldisclosure/2014/Jan/103 seclists.org
https://xpd.se/advisories/XPD-2013-001.txt xpd.se

CVE-2013-6838

Description

Affected configurations

Related

Weakness · not in database (1)

References