Most recent entries from all

bdu:2023-08077

certfr-2026-avi-0249 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2026-avi-0249

CLEANSTART-2026-PH67619 — Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA

Affected: CleanStart: sonarqube

Security vulnerability affects the sonarqube package. Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

cnvd-2023-71726

EUVD-2026-193668

fkie_cve-2023-35887

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks.

This issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10

GHSA-mjmq-gwgm-5qhm — Apache MINA SSHD information disclosure vulnerability

Affected: Maven: org.apache.sshd:sshd-common, Maven: org.apache.sshd:sshd-sftp, Maven: org.apache.sshd:sshd-core

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.

This issue affects Apache MINA: from 1.0 before 2.9.3 Users are recommended to upgrade to 2.9.3

Until version 2.1.0, some of the code affected by this vulnerability appeared in org.apache.sshd:sshd-core. Version 2.1.0 contains a [commit](https://github.com/apache/mina-sshd/commit/10de190e7d3f9189deb76b8d08c72334a1fe2df0) where the code was moved to the package org.apache.sshd:sshd-common, which did not exist until version 2.1.0.

gsd-2023-35887

OESA-2024-1079 — apache-sshd security update

Affected: openEuler:20.03-LTS-SP1: apache-sshd, openEuler:20.03-LTS-SP4: apache-sshd, openEuler:22.03-LTS: apache-sshd, openEuler:22.03-LTS-SP1: apache-sshd, openEuler:22.03-LTS-SP2: apache-sshd, openEuler:22.03-LTS-SP3: apache-sshd

Apache SSHD is a 100% pure java library to support the SSH protocols on both the client and server side. Security Fix(es): Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA. In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the rooted tree via paths including parent navigation ("..") beyond the root, or involving symlinks. This issue affects Apache MINA: from 1.0 before 2.10. Users are recommended to upgrade to 2.10 (CVE-2023-35887)

RHSA-2023:5396 — Red Hat Security Advisory: Red Hat Data Grid 8.4.4 security update

mina-sshd: Java unsafe deserialization vulnerability infispan: REST bulk ops don't check permissions infinispan: Non-admins should not be able to get cache config via REST API infinispan: circular reference on marshalling leads to DoS netty: SniHandler 16MB allocation leads to OOM jackson-databind: denial of service via cylic dependencies apache-mina-sshd: information exposure in SFTP server implementations

WID-SEC-W-2023-2518 — Red Hat JBoss Data Grid: Mehre Schwachstellen

Ein entfernter anonymer Angreifer kann eine Schwachstelle in Red Hat JBoss Data Grid ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder vertrauliche Informationen offenzulegen.