Yüksek CVSS 7.4 PoC var
CVE-2020-15778: Openssh: işletim sistemi komut enjeksiyonu
Açıklama (NVD)
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
Özet bilgiler
- Ürün
- Openbsd Openssh
- CVSS v3.1
- 7.4
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - EPSS
- %13,68 (yüzdelik 97)
- CWE
- CWE-78
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| openbsd-openssh | — | — | 8.3 |
| openbsd-openssh | 8.3 | 8.3 | — |
| openbsd-openssh | 8.3 | 8.3 | — |
| netapp-a700s-firmware | — | — | — |
| netapp-active-iq-unified-manager | 9.5 | — | — |
| netapp-hci-management-node | — | — | — |
| netapp-solidfire | — | — | — |
| netapp-steelstore-cloud-integrated-storage | — | — | — |
| netapp-hci-compute-node | — | — | — |
| netapp-hci-storage-node | — | — | — |
| broadcom-fabric-operating-system | — | — | — |