Lucene search
K

40 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/13 12:0 a.m.9 views

Siemens SCALANCE X-200RNA Switch Devices Improper Access Control (CVE-2015-5352)

The x11openhelper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time...

4.3CVSS6.4AI score0.0539EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2015-5352

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The x11openhelper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X...

4.3CVSS6.8AI score0.0539EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2023/03/08 12:0 a.m.39 views

Debian: Security Advisory (DLA-288-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS5.9AI score0.78359EPSS
Exploits1References2
F5 Networks
F5 Networks
added 2023/02/21 7:30 p.m.57 views

K17461: OpenSSH vulnerability CVE-2015-5352

Security Advisory Description The x11openhelper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection...

4.3CVSS6.8AI score0.0539EPSS
Exploits0Affected Software20
SUSE CVE
SUSE CVE
added 2023/02/15 5:16 a.m.2 views

SUSE CVE-2015-5352

The x11openhelper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time...

4.3CVSS6.9AI score0.0539EPSS
Exploits0References17
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.31 views

SUSE: Security Advisory (SUSE-SU-2015:1695-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS6.9AI score0.92346EPSS
Exploits1References13
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.35 views

SUSE: Security Advisory (SUSE-SU-2015:1547-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS5.4AI score0.92346EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.35 views

SUSE: Security Advisory (SUSE-SU-2015:1581-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS9.1AI score0.92346EPSS
Exploits1References14
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.43 views

SUSE: Security Advisory (SUSE-SU-2015:1544-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.5CVSS9.1AI score0.92346EPSS
Exploits1References9
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 9:47 p.m.30 views

Security Bulletin: Fixes for Multiple Security Vulnerabilities in IBM Security Identity Manager Virtual Appliance available

Summary There are multiple security vulnerabilities in various components used by IBM Security Identity Manager Virtual Appliance Vulnerability Details CVEID: CVE-2015-5352 DESCRIPTION: OpenSSH could allow a remote authenticated attacker to bypass security restrictions, caused by an error when...

6.9CVSS2AI score0.0539EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 9:47 p.m.30 views

Security Bulletin: IBM Security Access Manager appliances are affected by vulnerabilities in OpenSSH (CVE-2015-5352, CVE-2015-6563, CVE-2015-6564)

Summary Vulnerabilities have been identified in OpenSSH. IBM Security Access Manager appliances use OpenSSH and are affected by these vulnerabilities. Vulnerability Details CVEID: CVE-2015-5352 DESCRIPTION: OpenSSH could allow a remote authenticated attacker to bypass security restrictions, cause...

6.9CVSS1.4AI score0.0539EPSS
Exploits0Affected Software3
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 9:46 p.m.40 views

Security Bulletin: Vulnerabilities in Open Source openssh affect IBM Security Identity Governance Appliance (CVE-2015-5352, CVE-2015-6563, CVE-2015-6564 )

Summary IBM Security Identity Governance 5.2.1 appliances are affected by a vulnerability in openssh. Vulnerability Details CVEID: CVE-2015-5352 DESCRIPTION: OpenSSH could allow a remote authenticated attacker to bypass security restrictions, caused by an error when making connections after...

6.9CVSS1.2AI score0.0539EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 9:45 p.m.28 views

Security Bulletin: Vulnerabilities in OpenSSH affect IBM Security Network Protection (CVE-2015-5352, CVE-2015-6563, and CVE-2015-6564)

Summary Security vulnerabilities have been discovered in OpenSSH, which is used by IBM Security Network Protection. Vulnerability Details CVEID: CVE-2015-5352 DESCRIPTION: OpenSSH could allow a remote authenticated attacker to bypass security restrictions, caused by an error when making connectio...

6.9CVSS0.9AI score0.0539EPSS
Exploits0Affected Software1
ALT Linux
ALT Linux
added 2016/11/08 12:0 a.m.44 views

Security fix for the ALT Linux 6 package openssh version 6.7p1-alt1.M60P.4

6.7p1-alt1.M60P.4 built Nov. 8, 2016 Gleb Fotengauer-Malinovskiy in task 172047 Nov. 8, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fixes for CVE-2015-5352, CVE-2015-6563, CVE-2015-6564...

6.9CVSS7.3AI score0.0539EPSS
Exploits0
ALT Linux
ALT Linux
added 2016/11/08 12:0 a.m.30 views

Security fix for the ALT Linux 7 package openssh version 6.7p1-alt1.M70P.4

6.7p1-alt1.M70P.4 built Nov. 8, 2016 Gleb Fotengauer-Malinovskiy in task 172046 Nov. 8, 2016 Gleb Fotengauer-Malinovskiy - Backported upstream fixes for CVE-2015-5352, CVE-2015-6563, CVE-2015-6564...

6.9CVSS7.3AI score0.0539EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2016/06/09 12:0 a.m.53 views

Scientific Linux Security Update : openssh on SL6.x i386/x86_64 (20160510)

Security Fixes : - It was found that the OpenSSH client did not properly enforce the ForwardX11Timeout setting. A malicious or compromised remote X application could possibly use this flaw to establish a trusted connection to the local X server, even if only untrusted X11 forwarding was requested...

9.8CVSS6.8AI score0.0539EPSS
Exploits0References5
Cent OS
Cent OS
added 2016/05/16 10:19 a.m.425 views

openssh, pam_ssh_agent_auth security update

CentOS Errata and Security Advisory CESA-2016:0741 An update for openssh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

9.8CVSS7AI score0.0539EPSS
Exploits0References7
OpenVAS
OpenVAS
added 2016/05/11 12:0 a.m.50 views

RedHat Update for openssh RHSA-2016:0741-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.0539EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2015/12/22 12:0 a.m.51 views

GLSA-201512-04 : OpenSSH: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201512-04 OpenSSH: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenSSH. Please review the CVE identifiers referenced below for details. Impact : Workaround : There is no known workaround at this time...

8.5CVSS6.5AI score0.78359EPSS
Exploits5References6
OpenVAS
OpenVAS
added 2015/12/22 12:0 a.m.48 views

Gentoo Security Advisory GLSA 201512-04

Gentoo Linux Local Security Checks GLSA 201512-04 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

8.5CVSS6.2AI score0.78359EPSS
Exploits5References1
Rows per page
Query Builder