PT-2020-6806

CVE-2020-9355

·

Published

2020-02-16

·

Updated

2022-01-01

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions NetworkManager-ssh versions prior to 1.2.11
Description The issue is related to insufficient access control in the NetworkManager-ssh program, which can be exploited by a remote attacker to escalate privileges. This is due to the mishandling of extra options.
Recommendations For versions prior to 1.2.11, update to version 1.2.11 or later to resolve the issue. As a temporary workaround, consider restricting access to the NetworkManager-ssh program until a patch is available.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2020-1244
DSA-4637-1
Found an issue in the description? Have something to add? Feel free to write us 👾