Описание
Missing key verification in gost
An authentication bypass in the SSH service of gost v2.11.5 allows attackers to intercept communications via setting the HostKeyCallback function to ssh.InsecureIgnoreHostKey
Пакеты
Наименование
github.com/ginuerzh/gost
go
Затронутые версииВерсия исправления
<= 2.11.5
Отсутствует
Связанные уязвимости
CVSS3: 9.8
ubuntu
больше 1 года назад
An authentication bypass in the SSH service of gost v2.11.5 allows attackers to intercept communications via setting the HostKeyCallback function to ssh.InsecureIgnoreHostKey
CVSS3: 9.8
nvd
больше 1 года назад
An authentication bypass in the SSH service of gost v2.11.5 allows attackers to intercept communications via setting the HostKeyCallback function to ssh.InsecureIgnoreHostKey
