VDB
GCVE-VVD-MAGEIA-2018-204
GCVE-VVD-MAGEIA-2018-204
Advisory Published
A flaw was found in the implementation of `transport.py` in Paramiko,
which did not properly check whether authentication was completed before
processing other requests. A customized SSH client could simply skip the
authentication step (CVE-2018-7750).
This flaw is a user authentication bypass in the SSH Server
functionality of Paramiko. Where Paramiko is used only for its
client-side functionality (e.g. `paramiko.SSHClient`), the vulnerability
is not exposed and thus cannot be exploited.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | python-paramiko | 0 (affected), 2.0.8-1.mga6 (unaffected) | — |
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.