Information Disclosure

🗓️ 13 Jul 2023 08:56:24Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 19 Views

Vulnerability in org.apache.sshd library

Reporter	Title	Published	Views	Family All 68
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.3 fixes multiple security vulnerabilities	1 Nov 202310:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM B2B Sterling Integrator is affected by Apache MINA SSHD vulnerability to information disclosure (CVE-2023-35887)	14 Nov 202413:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for September 2023	5 Oct 202308:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache MINA SSHD package may affect IBM Storage Scale GUI (CVE-2022-25883)	22 Sep 202307:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to information disclosure due to Apache MINA SSHD (CVE-2023-35887)	30 Sep 202304:29	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilties affects IBM DB2 Data Management Console	6 Mar 202609:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities disclosed in IBM Eclipse SDK affect IBM SPSS Collaboration and Deployment Services	28 Mar 202518:05	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in IBM Business Automation Manager Open Editions	14 Apr 202615:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities affecting IBM Knowledge Catalog for IBM Cloud Pak for Data	1 Jun 202523:30	–	ibm
Chainguard	CVE-2023-35887 vulnerabilities	10 Apr 202602:13	–	cgr

Vulners

Node

apache sshd-commonRange2.1.0–2.9.2java

apache sshd-sftpRange2.6.0–2.9.2java

apache sshd-sftpRange2.0.0–2.5.1java

Source	Link
issues	www.issues.apache.org/jira/browse/SSHD-1324
github	www.github.com/apache/mina-sshd/pull/362
github	www.github.com/apache/mina-sshd/commit/a61e93035f06bff8fc622ad94870fb773d48b9f0
github	www.github.com/advisories/GHSA-mjmq-gwgm-5qhm
lists	www.lists.apache.org/thread/b9qgtqvhnvgfpn0w1gz918p21p53tqk2

21 Nov 2023 15:28Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.14.3 - 5

EPSS0.00106

SSVC