| Package | Affected versions | Patched versions |
|---|---|---|
| active iq unified manager | ≥ 9.5 | |
| openssh | = 8.3< 8.3 | 8.3 |
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free