弱点类型
A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does not verify whether the authenticated Kerberos principal is authorized for the requested local user, allowing authenticated clients to log in as arbitrary users.
受影响产品
- libssh libssh
- redhat hardened_images
- redhat enterprise_linux