Lucene search
GoogleOSV:GO-2020-0013HistoryApr 14, 2021 - 8:04 p.m.
Man-in-the-middle attack in golang.org/x/crypto/ssh
2021-04-1420:04:52
Google
osv.dev
8
ssh
man-in-the-middle attack
host key verification
golang
software
security.
EPSS
0.002
Percentile
61.9%
By default host key verification is disabled which allows for man-in-the-middle attacks against SSH clients if ClientConfig.HostKeyCallback is not set.
Related
osv
osv
CVE-2017-3204
2017-04-04 14:59:00
golang.org/x/crypto/ssh Man-in-the-Middle attack
2023-02-07 22:39:34
prion
prion
Default credentials
2017-04-04 14:59:00
ubuntucve
ubuntucve
CVE-2017-3204
2017-04-04 00:00:00
debiancve
debiancve
CVE-2017-3204
2017-04-04 14:59:00
gitlab
gitlab
Go SSH library vulnerable to Man-in-the-Middle attacks
2023-02-07 00:00:00
Go SSH library vulnerable to Man-in-the-Middle attacks
2023-02-07 00:00:00
cvelist
cvelist
CVE-2017-3204
2017-04-04 14:00:00
veracode
veracode
Man-in-the-middle (MitM)
2017-05-03 07:13:41
nvd
nvd
CVE-2017-3204
2017-04-04 14:59:00
redhatcve
redhatcve
CVE-2017-3204
2017-04-06 13:18:03
cve
cve
CVE-2017-3204
2017-04-04 14:59:00
github
github
golang.org/x/crypto/ssh Man-in-the-Middle attack
2023-02-07 22:39:34
