CVE-2016-1335

The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication…

published February 19, 2016

CVSS
—
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication configuration, which allows remote authenticated users to gain privileges by establishing a connection from an endpoint that was previously used for an administrator's connection, aka Bug ID CSCux22492.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03379 · 88.6th percentile
Published
2016-02-19T19:00Z
EPSS history
Timeline
  • 19 FEB 19:00Z
    The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication…
    cvelistv5