SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

OVAL

Security bypass vulnerability in OpenSSH - CVE-2018-20685

ID: oval:org.secpod.oval:def:50267	Date: (C)2019-01-17 (M)2023-12-20
Class: VULNERABILITY	Family: unix

In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename.

Platform:

Ubuntu 14.04

Ubuntu 16.04

Ubuntu 18.04

Ubuntu 18.10

Product:

openssh-server

openssh-client

Reference:

CVE-2018-20685