2 matches found
Important: containerd
Issue Overview: Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is in fact used to...
9.1CVSS6.8AI score0.03153EPSS
SaveExploits2
AZL-54315 CVE-2024-45337 affecting package podman 4.1.1-26
Applications and libraries which misuse connection.serverAuthenticate via callback field ServerConfig.PublicKeyCallback may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is...
9.1CVSS6.8AI score0.03153EPSS
SaveExploits2References1
20