CVE-2018-11750 - Previous releases of the Puppet cisco_ios module did not validate a host's identity before starting a SSH connection

Back Back to CVE browser

MEDIUM

Previous releases of the Puppet cisco_ios module did not validate a host's identity before starting a SSH connection

Published Oct 2, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 1.07%

Description

Previous releases of the Puppet cisco_ios module did not validate a host's identity before starting a SSH connection. As of the 0.4.0 release of cisco_ios, host key checking is enabled by default.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-3769
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/150978
Vendor Advisory
https://puppet.com/security/cve/CVE-2018-11750
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-3769		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/150978		Vendor Advisory
https://puppet.com/security/cve/CVE-2018-11750		x_refsource_CONFIRMVendor Advisory