Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2019/03/25 4:16 p.m.39 views

Improper Certificate Validation in chloride

Prior to version 0.3.0, chloride's use of net-ssh resulted in host fingerprints for previously unknown hosts getting added to the user's knownhosts file without confirmation. In version 0.3.0 this is updated so that the user's knownhosts file is not updated by chloride...

7.5CVSS2.5AI score0.00893EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2019/03/21 4:0 p.m.16 views

CVE-2018-6517

Prior to version 0.3.0, chloride's use of net-ssh resulted in host fingerprints for previously unknown hosts getting added to the user's knownhosts file without confirmation. In version 0.3.0 this is updated so that the user's knownhosts file is not updated by chloride...

7.5CVSS6.8AI score
SaveExploits0References1
RubySec
RubySec
added 2019/03/08 12:0 a.m.24 views

Improper handling of ssh known_hosts file with Chloride

Prior to version 0.3.0, chloride's use of net-ssh resulted in host fingerprints for previously unknown hosts getting added to the user's knownhosts file without confirmation. In version 0.3.0 this is updated so that the user's knownhosts file is not updated by chloride...

7.5CVSS2.4AI score0.00893EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder