CVE-2020-8968: Parallels Remote Application Server

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Parallels Remote Application Server (RAS) allows a local attacker to retrieve certain profile password in clear text format by uploading a previously stored cyphered file by Parallels RAS. The confidentiality, availability and integrity of the information of the user could be compromised if an attacker is able to recover the profile password.

Affected products

• Parallels Remote Application Server: from 15.5, up to and including 17.0

Published 2021-12-17. Last modified 2026-06-17.