Lucene search
Veracode Vulnerability DatabaseVERACODE:4130HistoryMay 03, 2017 - 7:13 a.m.
Man-in-the-middle (MitM)
2017-05-0307:13:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
EPSS
0.002
Percentile
61.9%
github.com/golang/crypto is vulnerable to man-in-the-middle (MitM) attacks. The HostKeyCallback function currently interprets nil as to accept any host keys. A MitM server can allow the login to succeed and get the agemt to authenticate to the actual server.
References
Related
osv
osv
CVE-2017-3204
2017-04-04 14:59:00
Man-in-the-middle attack in golang.org/x/crypto/ssh
2021-04-14 20:04:52
golang.org/x/crypto/ssh Man-in-the-Middle attack
2023-02-07 22:39:34
prion
prion
Default credentials
2017-04-04 14:59:00
cvelist
cvelist
CVE-2017-3204
2017-04-04 14:00:00
gitlab
gitlab
Go SSH library vulnerable to Man-in-the-Middle attacks
2023-02-07 00:00:00
Go SSH library vulnerable to Man-in-the-Middle attacks
2023-02-07 00:00:00
nvd
nvd
CVE-2017-3204
2017-04-04 14:59:00
ubuntucve
ubuntucve
CVE-2017-3204
2017-04-04 00:00:00
debiancve
debiancve
CVE-2017-3204
2017-04-04 14:59:00
redhatcve
redhatcve
CVE-2017-3204
2017-04-06 13:18:03
cve
cve
CVE-2017-3204
2017-04-04 14:59:00
github
github
golang.org/x/crypto/ssh Man-in-the-Middle attack
2023-02-07 22:39:34
