Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g339-4h86-hr72

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to authentication bypass and remote takeover of the InsightIQ. This allows an attacker to take complete control of InsightIQ to affect services provided by SSH; so Dell recommends customers to upgrade at the earliest opportunity.

Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to authentication bypass and remote takeover of the InsightIQ. This allows an attacker to take complete control of InsightIQ to affect services provided by SSH; so Dell recommends customers to upgrade at the earliest opportunity.

EPSS

Процентиль: 42%
0.00198
Низкий

Дефекты

CWE-327

Связанные уязвимости

CVSS3: 8.1
nvd
больше 4 лет назад

Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to authentication bypass and remote takeover of the InsightIQ. This allows an attacker to take complete control of InsightIQ to affect services provided by SSH; so Dell recommends customers to upgrade at the earliest opportunity.

CVSS3: 8.1
fstec
больше 4 лет назад

Уязвимость реализации сетевого протокола SSH аналитической платформы для мониторинга производительности и создания отчетов Dell Isilon InsightIQ, позволяющая нарушителю обойти ограничения безопасности и получить полный контроль над приложением

EPSS

Процентиль: 42%
0.00198
Низкий

Дефекты

CWE-327