CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

OSV•added 2024/08/01 6:32 p.m.•18 views

GHSA-67FW-W8F2-88WP casdoor's use of`ssh.InsecureIgnoreHostKey()` disables host key verification

An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey method...

6.9CVSS7.2AI score0.00463EPSS

Exploits0References5

NVD•added 2024/08/01 4:15 p.m.•23 views

CVE-2024-41264

An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey method...

7.5CVSS0.00463EPSS

Exploits0References1

Vulnrichment•added 2024/08/01 12:0 a.m.•17 views

CVE-2024-41264

An issue discovered in casdoor v1.636.0 allows attackers to obtain sensitive information via the ssh.InsecureIgnoreHostKey method...

6.3AI score0.00463EPSS

Exploits0References1

CVE•added 2024/08/01 12:0 a.m.•57 views

CVE-2024-41264

The connected sources confirm a vulnerability in casdoor v1.636.0 where ssh.InsecureIgnoreHostKey() disables host key verification, enabling attackers to obtain sensitive information. The issue is described across multiple feeds (Red Hat, OSV, Veracode, GHSA, CNNVD, CVE records) with consistent d...

7.5CVSS6.4AI score0.00463EPSS

Exploits0References1Affected Software1