CVE-2020-15778
גבוהה 7.4
תיאור (מקור, אנגלית)
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
מדדים
- CVSS 3.1
-
7.4 (HIGH)
מקור הציון: NVD
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 14% (אחוזון 100) נכון ל-14/10/2026
- CWE
- CWE-78
מוצרים מושפעים
openbsd: openssh; netapp: a700s firmware; netapp: a700s; netapp: active iq unified manager; netapp: hci management node; netapp: solidfire; netapp: steelstore cloud integrated storage; netapp: hci compute node; netapp: hci storage node; broadcom: fabric operating system
קישורים
- https://www.openssh.com/security.html Vendor Advisory
- https://www.openssh.com/security.html Vendor Advisory
- https://github.com/cpandya2909/CVE-2020-15778/ ExploitThird Party Advisory
- https://github.com/cpandya2909/CVE-2020-15778/ ExploitThird Party Advisory
- https://access.redhat.com/errata/RHSA-2024:3166 Third Party Advisory
- https://news.ycombinator.com/item?id=25005567 Third Party Advisory
- https://security.gentoo.org/glsa/202212-06 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20200731-0007/ Third Party Advisory
- https://access.redhat.com/errata/RHSA-2024:3166 Third Party Advisory
- https://news.ycombinator.com/item?id=25005567 Third Party Advisory