Lucene search

K
cvelistRedhatCVELIST:CVE-2016-1908
HistoryApr 11, 2017 - 12:00 a.m.

CVE-2016-1908

2017-04-1100:00:00
redhat
raw.githubusercontent.com
2

9.1 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.3%

The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.