Skip to content
OpenAdvisories
Unscored CVE-2019-8901 EUVD-2019-18290GHSA-4v9x-x766-gmm3

This issue was addressed by verifying host keys when connecting to a previously-known SSH server. This issue is fixed in iOS 13.1 and iPadO…

Published Oct 27, 2020 · Updated Aug 4, 2024 · Assigned by apple

Description

This issue was addressed by verifying host keys when connecting to a previously-known SSH server. This issue is fixed in iOS 13.1 and iPadOS 13.1. An attacker in a privileged network position may be able to intercept SSH traffic from the “Run script over SSH” action.

Affected products

VendorProductAffectedFixed
Apple iOS and iPadOS unspecified – < 13.1 13.1

References