9.8

CVE-2018-7750

Exploit

transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.

Data is provided by the National Vulnerability Database (NVD)
Paramiko ≫ Paramiko Version < 1.17.6
Paramiko ≫ Paramiko Version >= 1.18.0 < 1.18.5
Paramiko ≫ Paramiko Version >= 2.0.0 < 2.0.8
Paramiko ≫ Paramiko Version >= 2.1.0 < 2.1.5
Paramiko ≫ Paramiko Version >= 2.2.0 < 2.2.3
Paramiko ≫ Paramiko Version >= 2.3.0 < 2.3.2
Paramiko ≫ Paramiko Version2.4.0
Redhat ≫ Ansible Engine Version2.0
Redhat ≫ Ansible Engine Version2.4
Redhat ≫ Cloudforms Version4.5
Redhat ≫ Cloudforms Version4.6
Redhat ≫ Virtualization Version4.1
Debian ≫ Debian Linux Version8.0
Debian ≫ Debian Linux Version9.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 16.05% 0.946
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://www.securityfocus.com/bid/103713
Third Party Advisory
VDB Entry
https://github.com/paramiko/paramiko/issues/1175
Third Party Advisory
Issue Tracking
https://usn.ubuntu.com/3603-1/
Third Party Advisory
https://usn.ubuntu.com/3603-2/
Third Party Advisory
https://www.exploit-db.com/exploits/45712/
Third Party Advisory
Exploit
VDB Entry