Lucene search
MitreVULNRICHMENT:CVE-2024-41258HistoryJul 31, 2024 - 12:00 a.m.
CVE-2024-41258
2024-07-3100:00:00
mitre
github.com
1
cve-2024-41258
filestash
ssh
insecureignorehostkey
vulnerability
host key verification
man-in-the-middle attack
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
37.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
An issue was discovered in filestash v0.4. The usage of the ssh.InsecureIgnoreHostKey() disables host key verification, possibly allowing attackers to obtain sensitive information via a man-in-the-middle attack.
Related
cve
cve
CVE-2024-41258
2024-07-31 21:15:18
nvd
nvd
CVE-2024-41258
2024-07-31 21:15:18
cvelist
cvelist
CVE-2024-41258
2024-07-31 00:00:00
veracode
veracode
Man-In-The-Middle Attack
2024-08-02 04:24:33
osv
osv
CVE-2024-41258
2024-07-31 21:15:18
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
37.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-41258