CVE-2024-48460

Name of the Vulnerable Software and Affected Versions: Eugeny Tabby version 1.0.213

Description: The issue allows a remote attacker to obtain sensitive information via the server. It sends the SSH username and password even when the host key verification fails. This could potentially expose confidential data.

Recommendations: For Eugeny Tabby version 1.0.213, as a temporary workaround, consider restricting access to the SSH server until a patch is available. Avoid using the username and password in the affected SSH connection until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.