Advisory ROSA-SA-2025-3078

🗓️ 10 Nov 2025 06:27:52Reported by ROSA LABType

Advisory for Open SSH on ROSA Virtualization 3.1 with CVEs causing remote code execution or authentication bypass.

Reporter	Title	Published	Views	Family All 220
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Golang Go, HTTP/2, NGINX, OpenSSH, Linux kernel might affect IBM Spectrum Protect Plus	4 Feb 202518:15	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in OpenSSH affects IBM Watson Studio Local	20 Dec 201913:54	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	19 Jun 202505:35	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System [ CVE-2023-51767]	29 Sep 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is not vulnerable to CVE-2023-51767	15 May 202417:35	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several issues due to open source packages	28 Nov 202519:13	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access	12 Jan 202623:03	–	ibm
ATTACKERKB	CVE-2021-36368	13 Mar 202200:15	–	attackerkb
AlpineLinux	CVE-2021-36368	12 Mar 202223:24	–	alpinelinux
AlpineLinux	CVE-2023-51767	24 Dec 202300:00	–	alpinelinux

OS	OS Version	Architecture	Package	Package Version	Filename
ROSA	any	noarch	openssh	8.0	UNKNOWN

10 Nov 2025 06:27Current

10High risk

Vulners AI Score10

CVSS 24.4

CVSS 3.17 - 7.8

EPSS0.05039

SSVC