Lucene search
Redhat.comRH:CVE-2023-35887HistorySep 21, 2023 - 1:24 p.m.
CVE-2023-35887
2023-09-2113:24:39
redhat.com
access.redhat.com
19
apache mina sshd
unauthorized access
sftp servers
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
EPSS
0.001
Percentile
18.4%
A flaw was found in Apache Mina SSHD that could be exploited on certain SFTP servers implemented using the Apache Mina RootedFileSystem. This issue could permit authenticated users to view information outside of their permissions scope.
Related
ibm
ibm
osv
osv
Apache MINA SSHD information disclosure vulnerability
2023-07-10 18:30:49
CVE-2023-35887
2023-07-10 16:15:53
nessus
nessus
RHEL 8 : apache-mina-sshd (Unpatched Vulnerability)
2024-05-11 00:00:00
prion
prion
Design/Logic Flaw
2023-07-10 16:15:00
cvelist
cvelist
nvd
nvd
CVE-2023-35887
2023-07-10 16:15:53
github
github
Apache MINA SSHD information disclosure vulnerability
2023-07-10 18:30:49
veracode
veracode
Information Disclosure
2023-07-13 08:56:24
cnvd
cnvd
Apache MINA Information Disclosure Vulnerability
2023-07-12 00:00:00
cve
cve
CVE-2023-35887
2023-07-10 16:15:53
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
EPSS
0.001
Percentile
18.4%
Related for RH:CVE-2023-35887