Vendor
sshnet
3 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.5
Weak private key generation in SSH.NET
SSH.NET is a Secure Shell (SSH) library for .NET. In versions 2020.0.0 and 2020.0.1, during an `X25519` key exchange, the client’s private key is generated with `System.Random`. `System.Random` is not a cryptographically secure random number generator, it mus…