Beveiligingsadvies

CVE-2025-15079

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-01-08 10:08:13

Laatst bijgewerkt 2026-09-15 06:02:32

Toegewezen door curl

CVSS-score 5.3

Status PUBLISHED

Beschrijving

When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could still mistakenly accept connecting to hosts *not present* in the specified file if they were added as recognized in the libssh *global* known_hosts file.

← Alle CVE's bekijken Bekijk op cve.org ↗