POJIA破甲
地图 / ssh: unprivileged users may hijack due to backdated ssh version open port found(███.unikrn.com)

ssh: unprivileged users may hijack due to backdated ssh version open port found(███.unikrn.com)

代码执行 / 远程文件包含 / #257335

厂商
Unikrn
严重程度
低危
赏金
$25
弱点
远程文件包含
研究员
@walidhossain_
披露日期
2019-03-04
资产
auctionbot.unikrn.com
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(1083 字符中的一小部分)
**Summary:** Vulnerabilities in OpenSSH Session Hijacking Vulnerability is a Medium risk vulnerability that is one of the most frequently found on networks around the world. This issue has been around since at least 1990 but has proven either difficult to detect, difficult to resolve or prone to …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Unikrn 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @walidhossain_ · 版权归作者与 Unikrn 所有

同类报告

[CVE-2022-44268] Arbitrary Remote Leak via ImageMagickHackerOne · 2023-03-16SSRF & LFR via on city-mobil.ruMail.ru · —Keybase client (Windows 10): Write files anywhere in userland using relative path in "download attachement" featureKeybase · — · $5,000Payload delivery via Social Media urls on H1 profileHackerOne · 2024-07-23Grafana LFI on https://grafana.mariadb.orgMariaDB · 2022-01-06LFI with potential to RCE on ██████ using CVE-2019-3396U.S. Dept Of Defense · 2019-10-04