ZÉROJOUR

The zero-day paper — printed from structured content, not scraped prose.
Permanent editionPublic dataset · Sanity GROQGHSA × CISA KEV
paramiko (pip) · published 2018-10-10

Paramiko Authentication Bypass vulnerability

CVE-2018-1000805 — CVSS 8.8/10. Fix: upgrade to 2.4.2.
Package
paramiko
Ecosystem
pip
Vector
NETWORK
Complexity
LOW
Privileges
LOW
Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.

Weakness classes: CWE-732 (Incorrect Permission Assignment for Critical Resource) · CWE-863 (Incorrect Authorization)

Source: GHSA-f2j6-wrhh-v25m · GitHub Advisory Database (CC-BY-4.0) — printed from a structured Sanity dataset. ← Back to the front page

ZéroJour prints itself from a Sanity dataset of real advisories (GitHub Advisory Database, CC-BY-4.0; CISA KEV). No scraping, no keyword search — headlines are typed fields, scores are numbers, fixes are versions. The newsroom composes, a human approves.