1092 matches found
CVE-2023-45226
CVE-2023-45226 affects BIG-IP Next SPK, specifically the f5-debug-sidecar and f5-debug-sshd containers in SPK TMM. The issue is hardcoded credentials that could let an attacker intercept traffic and impersonate the SPK SSH server when ssh debug is enabled. Exposure is documented in multiple sourc...
Authentication flaw
JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH server does not verify the corresponding SSH private key. An attacker could exploit a vulnerability by utilizing a disclosed public key to attempt brute-force authentication...
CVE-2023-42818 SSH public key login without private key challenge if mfa is enabled in jumpserver
JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH server does not verify the corresponding SSH private key. An attacker could exploit a vulnerability by utilizing a disclosed public key to attempt brute-force authentication...
CVE-2023-42818 SSH public key login without private key challenge if mfa is enabled in jumpserver
JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH server does not verify the corresponding SSH private key. An attacker could exploit a vulnerability by utilizing a disclosed public key to attempt brute-force authentication...
CVE-2023-42818 SSH public key login without private key challenge if mfa is enabled in jumpserver
JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH server does not verify the corresponding SSH private key. An attacker could exploit a vulnerability by utilizing a disclosed public key to attempt brute-force authentication...
PT-2023-7221
Name of the Vulnerable Software and Affected Versions JumpServer versions prior to 3.5.6 JumpServer versions prior to 3.6.5 Description The issue is related to the Koko SSH server in JumpServer, an open source bastion host. When users enable MFA and use a public key for authentication, the Koko S...
CVE-2023-42818: Improper Authentication
JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH server does not verify the corresponding SSH private key. An attacker could exploit a vulnerability by utilizing a disclosed public key to attempt brute-force authentication...
Vulnerability CVE-2008-5161 (SSH Server CBC Mode Ciphers Enabled) on SDX
Regarding vulnerability CVE-2008-5161 SSH Server CBC Mode Ciphers Enabled, we need to follow the below article to mitigate this vulnerability. Addressing False Positives from CBC and MAC Vulnerability Scans of NetScaler SSHD citrix.com However, we are unable to perform the steps mentioned in the...
Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2023-339)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-339 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks ...
Oracle Linux 7 : libssh2 (ELSA-2020-3915)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-3915 advisory. - fix integer overflow in SSHMSGDISCONNECT logic CVE-2019-17498 - fix integer overflow in keyboard interactive handling that allows out-of-bounds writes...
RHEL 8 : openssh (RHSA-2023:4383)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4383 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary f...
CVE-2023-38408
A vulnerability was found in OpenSSH. The PKCS11 feature in the ssh-agent in OpenSSH has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system the code in /usr/lib is not necessarily safe for loading into ssh-agent...
CVE-2022-44719
An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions...
CVE-2022-44719
An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions...
Design/Logic Flaw
An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions...
CVE-2022-44719
An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions...
CVE-2022-44719
CVE-2022-44719 affects Weblib Ucopia prior to 6.0.13. The vulnerability is in the SSH Server which has insecure permissions, enabling potential unauthorized access and impacting confidentiality (per CVSS vector: HIGH). The issue is documented across multiple sources (e.g., NVD/Red Hat/PRION) with...
CVE-2022-44719
An issue was discovered in Weblib Ucopia before 6.0.13. The SSH Server has Insecure Permissions...
PT-2023-14536 · Unknown · Weblib Ucopia
Name of the Vulnerable Software and Affected Versions: Weblib Ucopia versions prior to 6.0.13 Description: An issue was discovered in the SSH Server of Weblib Ucopia, where it has insecure permissions. Recommendations: For versions prior to 6.0.13, update to version 6.0.13 or later to resolve the...