CVE-2018-7749: Improper Authentication

March 12, 2018 (updated March 4, 2019)

The SSH server implementation of AsyncSSH does not properly check whether authentication is completed before processing other requests. A customized SSH client can simply skip the authentication step.

References

groups.google.com/forum/
nvd.nist.gov/vuln/detail/CVE-2018-7749

Detect and mitigate CVE-2018-7749 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →