mina-sshd: Java unsafe deserialization vulnerability

🗓️ 09 Feb 2023 11:35:44Reported by RedHatType

A flaw in Apache Mina SSHD allows unsafe Java deserialization of a private key, enabling attacker data injection.

Reporter	Title	Published	Views	Family All 128
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to unsafe deserialization due to Apache MINA SSHD (CVE-2022-45047)	21 Dec 202219:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilties affects IBM DB2 Data Management Console	6 Mar 202609:25	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability has been identified in the IBM Spectrum Scale GUI where a remote authenticated user can execute commands [CVE-2022-45047]	14 Apr 202311:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affecting IBM Knowledge Catalog for IBM Cloud Pak for Data	1 Jun 202523:30	–	ibm
GithubExploit	Exploit for Deserialization of Untrusted Data in Apache Sshd	7 Apr 202303:16	–	githubexploit
ATTACKERKB	CVE-2022-45047	16 Nov 202209:15	–	attackerkb
BDU FSTEC	Vulnerability of the org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider class in the Java library for supporting SSH protocol by Apache SSHD, allowing a hacker to execute arbitrary code.	12 Dec 202300:00	–	bdu_fstec
Broadcom	Deserialization of Untrusted Data affecting org.apache.sshd:sshd-common package (CVE-2022-45047)	23 May 202400:00	–	broadcom
Circl	CVE-2022-45047	17 Nov 202215:58	–	circl
CNNVD	Apache MINA 代码问题漏洞	16 Nov 202200:00	–	cnnvd

Vulners

Node

AND

Source	Link
access	www.access.redhat.com/security/cve/CVE-2022-45047
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-45047
cve	www.cve.org/CVERecord
mail-archive	www.mail-archive.com/[email protected]/msg39312.html

30 Jun 2026 03:18Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.8

EPSS0.03571

SSVC