Beveiligingsadvies

CVE-2019-6110

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-01-31 00:00:00
Laatst bijgewerkt 2025-12-18 14:32:50
Toegewezen door mitre
CVSS-score 6.8
Status PUBLISHED

Beschrijving

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.