Skip to content
OpenAdvisories

Package · Debian

libmina-sshd-java

12 known vulnerabilities.

3 results · Clear filters · Feed

  • Critical 9.1

    Apache MINA SSHD: Asynchronous authentication can bypass signature verification

    Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain (presumed rare) way to implement an SSH server. Apache MINA SSHD is a Java library for client- and server-side SSH. In the server part of th…

  • Critical 9.1

    Apache MINA SSHD: LDAP injection in sshd-ldap

    Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-ldap component provides support fo…

  • Critical 9.1

    Apache MINA SSHD: LDAP password authentication ineffective

    A missing check in LdapPasswordAuthenticator in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 or 3.0.0-M1 to 3.0.0-M5 bypassed authentication checks. Apache MINA SSHD is a Java library for client-side and server-side SSH. The optional sshd-…