vulnerability
Oracle Solaris 11: CVE-2018-20684: Vulnerability in OpenSSH, RCP
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:N/C:N/I:P/A:P) | Jan 10, 2019 | Mar 20, 2019 | Feb 17, 2022 |
Severity
6
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:P)
Published
Jan 10, 2019
Added
Mar 20, 2019
Modified
Feb 17, 2022
Description
In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files. This affects TSCPFileSystem::SCPSink in core/ScpFileSystem.cpp.
Solution(s)
oracle-solaris-11-4-upgrade-consolidation-osnet-osnet-incorporation-11-4-11-4-7-0-1-5-0oracle-solaris-11-4-upgrade-network-ssh-7-7-0-1-11-4-7-0-1-3-0
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.