Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper Authorization Check for SSH Certificate Revocation
Vulnerability Description
Step CA is an online certificate authority for secure, automated certificate management for DevOps. Prior to 0.29.0, there is an improper authorization check for SSH certificate revocation. This affects deployments configured with the SSHPOP provisioner. This vulnerability is fixed in 0.29.0.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H
Vulnerability Type
授权机制不正确
Vulnerability Title
Smallstep step-ca 安全漏洞
Vulnerability Description
Smallstep step-ca是美国Smallstep公司的一个面向DevOps的安全、自动化证书管理的在线证书颁发机构。 Smallstep step-ca 0.29.0之前版本存在安全漏洞，该漏洞源于SSH证书撤销授权检查不当，可能导致未授权访问。
CVSS Information
N/A
Vulnerability Type
N/A