ID:6049 - Exploit for Authentication bypass in Paramiko - CVE-2018-7750

 
Main Vulnerability Database Exploits ID:6049 - Exploit for Authentication bypass in Paramiko - CVE-2018-7750

ID:6049 - Exploit for Authentication bypass in Paramiko - CVE-2018-7750

Published: June 17, 2021


Vulnerability identifier: #VU11130
Vulnerability risk: Low
CVE-ID: CVE-2018-7750
CWE-ID: CWE-592
Exploitation vector: Remote access
Vulnerable software:
Paramiko

Link to public exploit:


Vulnerability description

The vulnerability allows a remote unauthenticated attacker to bypass authentication.

The weakness exists is due to improper security restrictions. A remote attacker can use a customized SSH client, bypass authentication and gain unauthorized access to resources on the target systemю

Remediation

Update to versions 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5 or 1.17.6.