CVE-2023-40236

2023-12-2500:00:00

mitre

www.cve.org

pexip vmr

self-service portal

ssh host key

authentication bypass

cve-2023-40236

5.8 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.8%

JSON

In Pexip VMR self-service portal before 3, the same SSH host key is used across different customers’ installations, which allows authentication bypass.

References

docs.pexip.com/admin/security_bulletins.htm