VDB
RHSA-2025%3A10771
RHSA-2025%3A10771
PUBLISHED
CVSS 8.199999809265137 HIGH
A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-cluster-ingress-rhel9-operator@sha256:b62545650d9add3739119e7ff8f127803ba74b9374d59cee92423fd9b0b0e7c0_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-cluster-ingress-rhel9-operator@sha256:b62545650d9add3739119e7ff8f127803ba74b9374d59cee92423fd9b0b0e7c0_ppc64le |
| Red Hat | openshift4/ose-cluster-control-plane-machine-set-rhel9-operator@sha256:0387ecfcb9d74fd205560d02cc0bb15a9401666fba215c4129601cceb64d7829_s390x as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-cluster-control-plane-machine-set-rhel9-operator@sha256:0387ecfcb9d74fd205560d02cc0bb15a9401666fba215c4129601cceb64d7829_s390x |
| Red Hat | openshift4/ose-prometheus-alertmanager-rhel9@sha256:0619de133de30e0cc1ce657044945941d196ddf5087099aba1d909074c5e011b_s390x as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | openshift4/ose-csi-external-provisioner-rhel9@sha256:1ffda2aab9f92a3d179ed85c55a74740a2beb13466773733be80e62e922627eb_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-csi-external-provisioner-rhel9@sha256:1ffda2aab9f92a3d179ed85c55a74740a2beb13466773733be80e62e922627eb_ppc64le |
| Red Hat | openshift4/ose-cluster-monitoring-rhel9-operator@sha256:c03df2a873a88392e9933116a64e72030c9e640285c21b1783baf9bcc78fe688_s390x as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-cluster-monitoring-rhel9-operator@sha256:c03df2a873a88392e9933116a64e72030c9e640285c21b1783baf9bcc78fe688_s390x |
| Red Hat | openshift4/ose-container-networking-plugins-rhel9@sha256:b79f8073587ac2519952fbb36f0de262bdc7b0388fea56b659d7ab289342d500_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-container-networking-plugins-rhel9@sha256:b79f8073587ac2519952fbb36f0de262bdc7b0388fea56b659d7ab289342d500_arm64 |
| Red Hat | openshift4/ose-multus-route-override-cni-rhel9@sha256:b952de368d82979cabac49e7669a715650ad65792b6099f6784d2b545b1ff7e0_s390x as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-multus-route-override-cni-rhel9@sha256:b952de368d82979cabac49e7669a715650ad65792b6099f6784d2b545b1ff7e0_s390x |
| Red Hat | openshift4/ose-baremetal-runtimecfg-rhel9@sha256:d8b3836f2aea9c6b553a9612516826e36447fbd6bcb17f04e58af4bcb2dce65c_s390x as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-baremetal-runtimecfg-rhel9@sha256:d8b3836f2aea9c6b553a9612516826e36447fbd6bcb17f04e58af4bcb2dce65c_s390x |
| Red Hat | openshift4/ose-cluster-update-keys-rhel9@sha256:6f8605f6e30190425f15f84e1ac4b84a1e74cae2b2bd24204a1f42ef4b551fce_s390x as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | openshift4/ose-configmap-reloader-rhel9@sha256:a7079479b3cfcb162acc653766572c0294dcc3459822dfeb7aabb12dcd3afe4c_s390x as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-configmap-reloader-rhel9@sha256:a7079479b3cfcb162acc653766572c0294dcc3459822dfeb7aabb12dcd3afe4c_s390x |
| Red Hat | openshift4/egress-router-cni-rhel9@sha256:3c15afcc7ac3ba4a0a3843d2392262cdf6d3e9f086e82b8b1465c02e69a159df_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/egress-router-cni-rhel9@sha256:3c15afcc7ac3ba4a0a3843d2392262cdf6d3e9f086e82b8b1465c02e69a159df_amd64 |
| Red Hat | openshift4/ose-prometheus-config-reloader-rhel9@sha256:dbec4f44302f81fb81bad188227deb9767689a227b67b932a94c4eda76404a2d_s390x as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-prometheus-config-reloader-rhel9@sha256:dbec4f44302f81fb81bad188227deb9767689a227b67b932a94c4eda76404a2d_s390x |
| Red Hat | openshift4/ose-oauth-server-rhel9@sha256:3e9f80c86baa30c6b1d4353f25b7e95651d80d34cf2507a15d965bbfec96aa56_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | openshift4/egress-router-cni-rhel9@sha256:acc6f0bc8f2ce2a46b683b7dcd5b5b30caa60f6577e28999da12a1e13ebf6fa9_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/egress-router-cni-rhel9@sha256:acc6f0bc8f2ce2a46b683b7dcd5b5b30caa60f6577e28999da12a1e13ebf6fa9_arm64 |
| Red Hat | openshift4/ose-networking-console-plugin-rhel9@sha256:2803a8b11714c79b35b20fffc907323cb08237df474712423515b310d1de30e9_ppc64le as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | openshift4/ose-csi-driver-manila-rhel9-operator@sha256:f4698a6fdb1e500766edc9cb67108d908039a4e59c08087b4b0c4408fc49a498_amd64 as a component of Red Hat OpenShift Container Platform 4.19 | * |
| Red Hat | openshift4/ose-aws-ebs-csi-driver-rhel9-operator@sha256:1a84963ff9d8a31c975b2730c50ba068a9c9169b61cb60a6ad8f81bd1bf36544_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-aws-ebs-csi-driver-rhel9-operator@sha256:1a84963ff9d8a31c975b2730c50ba068a9c9169b61cb60a6ad8f81bd1bf36544_arm64 |
| Red Hat | openshift4/ose-console-rhel9@sha256:3bad448d61c1a8d8c4b777404fb1b71b438e9fc9ebc9a4fb334d44717b82fb73_s390x as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-console-rhel9@sha256:3bad448d61c1a8d8c4b777404fb1b71b438e9fc9ebc9a4fb334d44717b82fb73_s390x |
| Red Hat | openshift4/ose-network-interface-bond-cni-rhel9@sha256:fbf533691745e8e94e93a6581c363911f29fc9d25e94858f000deaaace41eb28_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/ose-network-interface-bond-cni-rhel9@sha256:fbf533691745e8e94e93a6581c363911f29fc9d25e94858f000deaaace41eb28_arm64 |
| Red Hat | openshift4/azure-kms-encryption-provider-rhel9@sha256:739e42cab78d984e90d502f51154472e02da066000682c20d4840fcf1845ac58_arm64 as a component of Red Hat OpenShift Container Platform 4.19 | openshift4/azure-kms-encryption-provider-rhel9@sha256:739e42cab78d984e90d502f51154472e02da066000682c20d4840fcf1845ac58_arm64 |
…and 1304 more
Timeline
- Jul 16, 2025 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:10771 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2374692 issue
- https://issues.redhat.com/browse/OCPBUGS-54458 advisory
- https://issues.redhat.com/browse/OCPBUGS-55918 advisory
- https://issues.redhat.com/browse/OCPBUGS-56163 advisory
- https://issues.redhat.com/browse/OCPBUGS-56781 advisory
- https://issues.redhat.com/browse/OCPBUGS-57206 advisory
- https://issues.redhat.com/browse/OCPBUGS-57781 advisory
- https://issues.redhat.com/browse/OCPBUGS-57922 advisory
- https://issues.redhat.com/browse/OCPBUGS-58073 advisory
- https://issues.redhat.com/browse/OCPBUGS-58116 advisory
- https://issues.redhat.com/browse/OCPBUGS-58263 advisory
- https://issues.redhat.com/browse/OCPBUGS-58276 advisory
- https://issues.redhat.com/browse/OCPBUGS-58279 advisory
- https://issues.redhat.com/browse/OCPBUGS-58284 advisory
- https://issues.redhat.com/browse/OCPBUGS-58316 advisory
- https://issues.redhat.com/browse/OCPBUGS-58335 advisory
- https://issues.redhat.com/browse/OCPBUGS-58343 advisory
- https://issues.redhat.com/browse/OCPBUGS-58350 advisory
…and 20 more