Lucene search
MitreVULNRICHMENT:CVE-2024-41254HistoryJul 31, 2024 - 12:00 a.m.
CVE-2024-41254
2024-07-3100:00:00
mitre
github.com
2
litestream version 0.3.13
ssh insecureignorehostkey
man-in-the-middle attack
host key verification
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
37.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
An issue was discovered in litestream v0.3.13. The usage of the ssh.InsecureIgnoreHostKey() disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack.
Related
nvd
nvd
CVE-2024-41254
2024-07-31 21:15:17
veracode
veracode
Man-in-the-middle Attack
2024-08-02 08:24:11
cve
cve
CVE-2024-41254
2024-07-31 21:15:17
cvelist
cvelist
CVE-2024-41254
2024-07-31 00:00:00
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
37.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-41254