[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpTYcLptcwIGz7h1hRIiez5qgyNlk7CIfiSJSStFsixQ":3,"g5a-risk:CVE-2017-3204":130},{"success":4,"data":5,"meta":128},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":25,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":47,"references":48,"referencesCount":82,"weaknesses":83,"weaknessesCount":89,"isActivelyExploited":90,"cisaInfo":25,"otxData":25,"relatedBlogPosts":91,"seoMetadata":92,"configurations":117,"relatedVendorCves":126,"notableEvents":127},"CVE-2017-3204","What is CVE-2017-3204?","The Go SSH library (x\u002Fcrypto\u002Fssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism.","The Go SSH library (x\u002Fcrypto\u002Fssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to...","2017-04-04T14:59:00.18","2025-04-20T01:37:25.86",8.1,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","UNCHANGED",null,2.2,5.9,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":33,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":33,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","MEDIUM","PARTIAL",6.8,8.6,6.4,0.03156,[38,38,38,38,38,38,38],"High",[42],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"golang","crypto","*","cpe:2.3:a:golang:crypto:*:*:*:*:*:*:*:*",1,[49,55,59,64,67,72,74,76,78,80],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F97481","Securityfocus",[53,54],"Third Party Advisory","VDB Entry",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fbridge.grumpy-troll.org\u002F2017\u002F04\u002Fgolang-ssh-security\u002F","Grumpy-troll",[53],{"url":60,"source":61,"tags":62},"https:\u002F\u002Fgithub.com\u002Fgolang\u002Fcrypto\u002Fcommit\u002Fe4e2799dd7aab89f583e1d898300d96367750991","GitHub",[63,53],"Patch",{"url":65,"source":61,"tags":66},"https:\u002F\u002Fgithub.com\u002Fgolang\u002Fgo\u002Fissues\u002F19767",[53],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fgodoc.org\u002Fgolang.org\u002Fx\u002Fcrypto\u002Fssh","Godoc",[71],"Vendor Advisory",{"url":50,"source":51,"tags":73},[53,54],{"url":56,"source":57,"tags":75},[53],{"url":60,"source":61,"tags":77},[63,53],{"url":65,"source":61,"tags":79},[53],{"url":68,"source":69,"tags":81},[71],10,[84,87],{"id":85,"name":85,"description":86},"Unknown","CWE-310",{"id":85,"name":85,"description":88},"NVD-CWE-noinfo",2,false,[],{"title":93,"metaDescription":94,"keywords":95,"canonicalUrl":96,"structuredData":97},"What is CVE-2017-3204? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-3204, a high severity cyber security vulnerability from 2017. The Go SSH library (x\u002Fcrypto\u002Fssh) by default does not verify...","CVE-2017-3204, CVE-2017-3204 vulnerability, CVE-2017-3204 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, golang security, crypto vulnerability","\u002Fwhat-is\u002Fcve-2017-3204",{"@context":98,"@type":99,"headline":93,"description":94,"datePublished":10,"dateModified":11,"author":100,"publisher":104,"about":108,"mainEntityOfPage":112,"articleSection":115,"keywords":116},"https:\u002F\u002Fschema.org","TechArticle",{"@type":101,"name":102,"url":103},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":101,"name":102,"url":103,"logo":105},{"@type":106,"url":107},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":109,"name":6,"description":110,"additionalType":111},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":113,"@id":114},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-3204","Cybersecurity","CVE-2017-3204, CVE-2017-3204 vulnerability, CVE-2017-3204 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[118],{"Operator":25,"Negate":25,"Nodes":119},[120],{"Operator":121,"Negate":25,"CPEMatch":122},"OR",[123],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":124,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":125},"4C978A0F-3C80-4898-B1B3-DFF7F97D22DF","2017-03-17",[],[],{"lastModified":11,"cacheTime":129,"version":31},1792347315798,{"score":131,"band":132,"action":133,"scoredAt":134},41,"Medium","Plan remediation","2026-10-17T08:29:30.016457+00:00"]