Lucene search

K
osvGoogleOSV:USN-4854-1
HistoryMar 15, 2021 - 10:40 p.m.

python-asyncssh vulnerability

2021-03-1522:40:45
Google
osv.dev
3

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.5%

Matthijs Kooijman discovered that AsyncSSH server did not properly handle
authentication under certain conditions. An attacker with a specially
crafted client could use this vulnerability to skip authentication of SSH
sessions.

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.5%