Beveiligingsadvies

CVE-2024-2873

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-03-25 21:58:52
Laatst bijgewerkt 2024-08-01 19:50:46
Toegewezen door wolfSSL
CVSS-score 9.1
Status PUBLISHED

Beschrijving

A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorized access.