5 matches found
Authentication Bypass
github.com/ginuerzh/gost is vulnerable to Authentication Bypass. The vulnerability is due to improper validation of the HostKeyCallback function. An attacker can intercept communications by setting the HostKeyCallback function to ssh.InsecureIgnoreHostKey...
9.8CVSS6.8AI score0.00696EPSS
SaveExploits0References3Affected Software1
GHSA-8WXX-35QC-VP6R Missing key verification in gost
An authentication bypass in the SSH service of gost v2.11.5 allows attackers to intercept communications via setting the HostKeyCallback function to ssh.InsecureIgnoreHostKey...
9.8CVSS9.4AI score0.00696EPSS
SaveExploits0References5
CVE-2024-39223
An authentication bypass in the SSH service of gost v2.11.5 allows attackers to intercept communications via setting the HostKeyCallback function to ssh.InsecureIgnoreHostKey...
9.8CVSS7.4AI score0.00696EPSS
SaveExploits0References3
20