TNCVE-2022-45047 — Vulnetix

TNCVE-2022-45047 PUBLISHED

Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.

Timeline

Nov 16, 2022 CVE Published

References

Tenable: CVE-2022-45047 advisory

Open in Interactive Console →