Find real vulnerabilities before they ship
OpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local users to execute arbitrary commands by providing the command to the ssh daemon.
| Base Score | 10 |
|---|---|
| Vector String | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Base Severity | Unknown |
| Version | 2.0 |
| Attack Vector (AV) |
