GHSA-f2j6-wrhh-v25mHighCVSS 8.8

Paramiko Authentication Bypass vulnerability

Published
October 10, 2018
Last Modified
October 9, 2024

🔗 CVE IDs covered (1)

CVE-2018-1000805 →

📋 Description

Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.

🎯 Affected products5

  • pip/paramiko:>= 2.4.0, < 2.4.2
  • pip/paramiko:>= 2.3.0, < 2.3.3
  • pip/paramiko:>= 2.2.0, < 2.2.4
  • pip/paramiko:>= 2.1.0, < 2.1.6
  • pip/paramiko:>= 1.5.1, < 2.0.9

🔗 References (14)