A vulnerability classified as problematic was found in neutrinolabs xrdp up to 0.9.x. This vulnerability affects unknown code of the file /etc/xrdp/sesman.ini of the component Configuration Parameter Handler. The manipulation of the argument MaxLoginRetry leads to improper restriction of excessive authentication attempts.

This vulnerability was named CVE-2024-39917. The attack can be initiated remotely. There is no exploit available.

It is recommended to upgrade the affected component.