Поиск уязвимостей
Количество 6
Количество 6
CVE-2021-36367
PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response. This makes it easier for an attacker-controlled SSH server to present a later spoofed authentication prompt (that the attacker can use to capture credential data, and use that data for purposes that are undesired by the client user).
CVE-2021-36367
PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response. This makes it easier for an attacker-controlled SSH server to present a later spoofed authentication prompt (that the attacker can use to capture credential data, and use that data for purposes that are undesired by the client user).
CVE-2021-36367
PuTTY through 0.75 proceeds with establishing an SSH session even if i ...
GHSA-wccm-6vx2-7p8c
PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response. This makes it easier for an attacker-controlled SSH server to present a later spoofed authentication prompt (that the attacker can use to capture credential data, and use that data for purposes that are undesired by the client user).
BDU:2021-04545
Уязвимость реализации протокола SSH средства криптографической защиты PuTTY, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
ALT-PU-2021-2266
ALT-PU-2021-2266: package `putty` update to version 0.76-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2021-36367 PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response. This makes it easier for an attacker-controlled SSH server to present a later spoofed authentication prompt (that the attacker can use to capture credential data, and use that data for purposes that are undesired by the client user). | CVSS3: 8.1 | 1% Низкий | больше 5 лет назад |
 | CVE-2021-36367 PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response. This makes it easier for an attacker-controlled SSH server to present a later spoofed authentication prompt (that the attacker can use to capture credential data, and use that data for purposes that are undesired by the client user). | CVSS3: 8.1 | 1% Низкий | больше 5 лет назад |
| CVE-2021-36367 PuTTY through 0.75 proceeds with establishing an SSH session even if i ... | CVSS3: 8.1 | 1% Низкий | больше 5 лет назад |
| GHSA-wccm-6vx2-7p8c PuTTY through 0.75 proceeds with establishing an SSH session even if it has never sent a substantive authentication response. This makes it easier for an attacker-controlled SSH server to present a later spoofed authentication prompt (that the attacker can use to capture credential data, and use that data for purposes that are undesired by the client user). | CVSS3: 8.1 | 1% Низкий | больше 4 лет назад |
 | BDU:2021-04545 Уязвимость реализации протокола SSH средства криптографической защиты PuTTY, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 8.1 | 1% Низкий | больше 5 лет назад |
| ALT-PU-2021-2266 ALT-PU-2021-2266: package `putty` update to version 0.76-alt1 | CVSS3: 8.1 | 1% Низкий | больше 5 лет назад |
Уязвимостей на страницу