Lucene search

K
cvelistMitreCVELIST:CVE-2024-41254
HistoryJul 31, 2024 - 12:00 a.m.

CVE-2024-41254

2024-07-3100:00:00
mitre
www.cve.org
2
litestream
v0.3.13
ssh
insecureignorehostkey
vulnerability
man-in-the-middle
attack
host key verification

EPSS

0.001

Percentile

37.7%

An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey() disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack.

EPSS

0.001

Percentile

37.7%

Related for CVELIST:CVE-2024-41254