PT-2018-2486

🗓️ 16 Oct 2018 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 22 Views

OpenSSH 7.9 scp client directory check error may allow remote permission changes; disable or restrict scp.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	30 Sep 202416:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from kerberos 5, libxml2, go-jose, runc	3 Feb 202522:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Network Protection is affected by vulnerabilities in OpenSSH (CVE-2016-6210 CVE-2016-6515 CVE-2016-10009 CVE-2016-10011)	16 Jun 201822:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data Scheduling was built with a vulnerable golang compiler. ( CVE-2023-29406, CVE-2023-29409 )	6 Dec 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to a machine-in-the-middle attack due to Apache MINA SSHD (CVE-2023-48795)	4 Apr 202417:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Dec 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: OpenSSH vulnerability affects IBM Spectrum Protect Plus (CVE-2017-15906)	24 Sep 201808:15	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been addressed in IBM Verify Identity Access OIDC Provider (CVE-2024-45337, CVE-2025-22869)	9 Jul 202504:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Golang Go, HTTP/2, NGINX, OpenSSH, Linux kernel might affect IBM Spectrum Protect Plus	4 Feb 202518:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affect IBM XIV Gen3 (CVE-2016-0777, CVE-2016-0778)	18 Jun 201800:10	–	ibm

Source	Link
exploit-db	www.exploit-db.com/exploits/45210
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/702242
usn	www.usn.ubuntu.com/3885-1
aix	www.aix.software.ibm.com/aix/efixes/security/openssh_advisory13.asc
bdu	www.bdu.fstec.ru/vul/2014-00019
osv	www.osv.dev/vulnerability/SUSE-SU-2019:0125-2
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
bdu	www.bdu.fstec.ru/vul/2019-03791
github	www.github.com/cdxiaodong/CVE-2024-21626
bdu	www.bdu.fstec.ru/vul/2015-04088

17 Dec 2025 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 25.4 - 10

CVSS 3.19.8 - 9.9

CVSS 39.4 - 9.8

EPSS0.99999

SSVC