The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests. A customized SSH client can simply skip the authentication step.
References
Configurations
History
07 Nov 2023, 03:01
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2018-03-12 19:29
Updated : 2023-12-10 12:30
NVD link : CVE-2018-7749
Mitre link : CVE-2018-7749
CVE.ORG link : CVE-2018-7749
JSON object : View
Products Affected
asyncssh_project
- asyncssh
CWE
CWE-287
Improper Authentication