VDB
BDU%3A2021-00681
BDU%3A2021-00681
PUBLISHED
CVSS 5.400000095367432 MEDIUM
Уязвимость компонента ChannelSftp.OVERWRITE Java-реализации SSH2 jsch, позволяющая нарушителю оказать воздействие на целостность информации
Risk Scores
CVSS 2.0
5.400000095367432
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Сообщество свободного программного обеспечения, Oracle Corp., jcraft | Debian GNU/Linux, Oracle Data Integrator, JD Edwards EnterpriseOne Tools, jsch, Primavera Gateway |
Timeline
- Feb 11, 2021 CVE Published
- Apr 29, 2021 CVE Updated
References
- https://www.exploit-db.com/exploits/40411 url
- http://www.jcraft.com/jsch/ChangeLog url
- https://www.oracle.com/security-alerts/cpujan2021.html advisory
- https://www.oracle.com/security-alerts/cpuoct2020.html advisory
- https://www.oracle.com/security-alerts/cpuapr2021.html advisory
- https://lists.debian.org/debian-lts-announce/2020/04/msg00017.html advisory