Lucene search

K
osvGoogleOSV:GHSA-97CV-6PJF-5F9Q
HistoryMay 14, 2022 - 1:29 a.m.

AsyncSSH SSH Server Authentication Bypass

2022-05-1401:29:12
Google
osv.dev
1

0.003 Low

EPSS

Percentile

71.6%

The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests. A customized SSH client can simply skip the authentication step.