scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
References
| Link | Resource |
|---|---|
| https://github.com/cpandya2909/CVE-2020-15778/ | Exploit Third Party Advisory |
| https://news.ycombinator.com/item?id=25005567 | Third Party Advisory |
| https://security.gentoo.org/glsa/202212-06 | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20200731-0007/ | Third Party Advisory |
| https://www.openssh.com/security.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
|
History
07 Nov 2023, 03:17
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows." |
24 Feb 2023, 19:43
| Type | Values Removed | Values Added |
|---|---|---|
| References | (GENTOO) https://security.gentoo.org/glsa/202212-06 - Third Party Advisory |
28 Dec 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
22 Jun 2021, 14:47
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:broadcom:fabric_operating_system:-:*:*:*:*:*:*:* |
19 Apr 2021, 20:39
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:a700s:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:a700s_firmware:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:brocade_fabric_os:-:*:*:*:*:*:*:* cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:* |
|
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20200731-0007/ - Third Party Advisory | |
| References | (MISC) https://news.ycombinator.com/item?id=25005567 - Third Party Advisory |
12 Apr 2021, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | ** DISPUTED ** scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows." |
Information
Published : 2020-07-24 14:15
Updated : 2024-04-11 01:07
NVD link : CVE-2020-15778
Mitre link : CVE-2020-15778
CVE.ORG link : CVE-2020-15778
JSON object : View
Products Affected
netapp
- steelstore_cloud_integrated_storage
- solidfire
- hci_management_node
- active_iq_unified_manager
- a700s_firmware
- hci_compute_node
- a700s
- hci_storage_node
openbsd
- openssh
broadcom
- fabric_operating_system
CWE
CWE-78
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')