Vulnerabilitycritical
New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-48795 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks… | 5.9 | 93% |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Jan 01, 2024 Encryption / Network Security Security researchers from Ruhr University Bochum have discovered a vulnerability in the Secure Shell ( SSH ) cryptographic network protocol that could allow an attacker to downgrade the connection's security by breaking the integrity of the secure channel. Called Terrapin ( CVE-2023-48795 , CVSS score: 5.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.