CVE-2018-10933 libssh: Authentication Bypass due to improper message callbacks implementation

SUMMARY

not vulnerable

CVE ID

CVE-2018-10933

DESCRIPTION

A vulnerability was found in libssh's server-side state machine. A malicious client could create channels without first performing authentication, resulting in unauthorized access.

CVSS3 Base Score    9.1



 

RESOLUTION

Unitrends systems are not vulnerable since libssh is not installed.  Our software uses openssh and libssh2.

LINK TO ADVISORIES

• https://access.redhat.com/security/cve/cve-2018-10933 https://nvd.nist.gov/vuln/detail/CVE-2018-10933