CESA-2018:3406 -- centos 6 python-paramikoID: oval:org.secpod.oval:def:204898 | Date: (C)2018-11-12 (M)2023-07-28 |
Class: PATCH | Family: unix |
The python-paramiko package provides a Python module that implements the SSH2 protocol for encrypted and authenticated connections to remote machines. Unlike SSL, the SSH2 protocol does not require hierarchical certificates signed by a powerful central authority. The protocol also includes the ability to open arbitrary channels to remote services across an encrypted tunnel. Security Fix: * python-paramiko: Authentication bypass in auth_handler.py For more details about the security issue, including the impact, a CVSS score, and other related information, refer to the CVE page listed in the References section.