Security Bypass

🗓️ 16 May 2019 03:58:38Reported by Veracode Vulnerability DatabaseType

Azure SSH Keypairs security bypass vulnerability in Linux image

Reporter	Title	Published	Views	Family All 56
Tenable Nessus	Amazon Linux 2 : cloud-init (ALAS-2021-1595)	19 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : cloud-init (CESA-2019:0597)	20 Mar 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : cloud-init (EulerOS-SA-2019-2132)	12 Nov 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : cloud-init (EulerOS-SA-2020-1519)	1 May 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.6.0 : cloud-init (EulerOS-SA-2020-1751)	1 Jul 202000:00	–	nessus
Tenable Nessus	MiracleLinux 7 : cloud-init-18.2-1.el7.2 (AXSA:2019-3789:02)	16 Jan 202600:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.04 / MAIN 5.04 : cloud-init Vulnerability (NS-SA-2021-0011)	10 Mar 202100:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.05 / MAIN 5.05 : cloud-init Multiple Vulnerabilities (NS-SA-2021-0151)	27 Oct 202100:00	–	nessus
Tenable Nessus	openSUSE Security Update : cloud-init (openSUSE-2019-2621)	4 Dec 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : cloud-init (openSUSE-2019-2633)	4 Dec 201900:00	–	nessus

Vulners

Node

canonical cloud-initMatch0.7.9_24.el7.centos.1

canonical cloud-initMatch0.7.9_9.el7.centos.2

canonical cloud-initMatch0.7.9_24.el7.centos

canonical cloud-initMatch0.7.9_9.el7_4.7

Source	Link
access	www.access.redhat.com/security/updates/classification/
support	www.support.microsoft.com/en-us/help/4491476/extraneous-ssh-public-keys-added-to-authorized-keys-file-on-linux-vm
access	www.access.redhat.com/errata/RHSA-2019:0597
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0816
lists	www.lists.opensuse.org/opensuse-security-announce/2019-12/msg00018.html

04 Dec 2019 11:45Current

5.1Medium risk

Vulners AI Score5.1

CVSS 21.9

CVSS 35.1

EPSS0.00102