Beveiligingsadvies

CVE-2015-5352

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2015-08-03 00:00:00

Laatst bijgewerkt 2024-08-06 06:41:09

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.

← Alle CVE's bekijken Bekijk op cve.org ↗