脆弱性の種類
A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users.
影響を受ける製品
- libssh libssh
- redhat hardened_images
- redhat enterprise_linux