vendor:
Paramiko SSH Library
by:
Matthew Daley
7.5
CVSS
HIGH
Authentication Bypass
287
CWE
Product Name: Paramiko SSH Library
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: N/A
2018
Authentication Bypass Vulnerability in Paramiko SSH Library
A vulnerability in the Paramiko SSH library allows an attacker to bypass authentication by sending an invalid username. This vulnerability is due to the library not properly handling invalid usernames. An attacker can exploit this vulnerability by sending an invalid username to the SSH server. If the server is using the Paramiko library, the authentication will be bypassed and the attacker will be able to access the server.
Mitigation:
Upgrade to the latest version of Paramiko library.