Описание
VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys file, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.
Ссылки
- Press/Media Coverage
- Vendor Advisory
- Press/Media Coverage
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.0 (включая)
cpe:2.3:o:vmware:photon_os:*:2016-08-14:*:*:*:*:*:*
EPSS
Процентиль: 81%
0.01586
Низкий
9.8 Critical
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-798
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys file, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.
EPSS
Процентиль: 81%
0.01586
Низкий
9.8 Critical
CVSS3
9.3 Critical
CVSS2
Дефекты
CWE-798