{"action":"Upgrade paramiko to 2.0.9 or later.","affected":[{"fixed":"2.0.9","introduced":"1.5.1"}],"component":"paramiko","cve_ids":["CVE-2018-1000805"],"ecosystem":"PyPI","epss":0.04407,"exploited":false,"fixed_versions":["2.0.9"],"ghsa_id":"GHSA-f2j6-wrhh-v25m","id":"tcs_01M5KG84FKGATTQKDWHKFPP585","modified_at":"2023-11-08T03:59:40.071933Z","published_at":"2018-10-08T15:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2018-69","https://github.com/paramiko/paramiko/issues/1283","https://usn.ubuntu.com/3796-2/","https://usn.ubuntu.com/3796-1/","https://usn.ubuntu.com/3796-3/","https://lists.debian.org/debian-lts-announce/2018/10/msg00018.html","https://access.redhat.com/errata/RHSA-2018:3406","https://access.redhat.com/errata/RHSA-2018:3347","https://access.redhat.com/errata/RHSA-2018:3505","https://access.redhat.com/errata/RHBA-2018:3497","https://herolab.usd.de/wp-content/uploads/sites/4/usd20180023.txt","https://github.com/advisories/GHSA-f2j6-wrhh-v25m"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2018-69","url":"https://osv.dev/vulnerability/PYSEC-2018-69"}],"summary":"Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via netw"}