CVE-2011-2916

qtnx 0.9 stores non-custom SSH keys in a world-readable configuration file

published November 15, 2019

CVSS
—
EPSS
0%
Percentile
15.0
In the wild
Unconfirmed
What it is

qtnx 0.9 stores non-custom SSH keys in a world-readable configuration file. If a user has a world-readable or world-executable home directory, another local system user could obtain the private key used to connect to remote NX sessions.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00246 · 15.0th percentile
Published
2019-11-15T17:19Z
EPSS history
Timeline
  • 15 NOV 17:19Z
    qtnx 0.9 stores non-custom SSH keys in a world-readable configuration file
    cvelistv5