En bref
- CVE-2018-7749 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant asyncssh, asyncssh (asyncssh project).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.7%, plus élevée que 77.9% des vulnérabilités.
- Correctif : mettre à jour vers 1.12.1 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| asyncssh PyPI | < 1.12.1
| 1.12.1
|
| asyncssh | < 1.12.1
| 1.12.1
|
Description
The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests. A customized SSH client can simply skip the authentication step.
NVD description
The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests. A customized SSH client can simply skip the authentication step.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free