[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkzYvI_GWy1leNR5qY-6jFbK5-BXpGPMBNbIwQ7dhhO4":3,"g5a-risk:CVE-2018-1000805":305},{"success":4,"data":5,"meta":303},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":141,"references":142,"referencesCount":185,"weaknesses":186,"weaknessesCount":195,"isActivelyExploited":196,"cisaInfo":26,"otxData":26,"relatedBlogPosts":197,"seoMetadata":198,"configurations":223,"relatedVendorCves":301,"notableEvents":302},"CVE-2018-1000805","What is CVE-2018-1000805?","Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. This attack appear to be exploitable via network connectivity.","Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE. Th...","2018-10-08T15:29:00.713","2022-04-06T18:35:37.67",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.04407,[40,40,40,40,40,40,40],"High",[44,48,51,54,57,60,63,66,71,75,79,82,85,87,91,94,97,100,104,106,109,111,114,116,121,124,129,132,135,138],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"paramiko","1.17.6","cpe:2.3:a:paramiko:paramiko:1.17.6:*:*:*:*:*:*:*",{"vendor":45,"product":45,"version":49,"criteria":50,"vulnerable":4},"1.18.5","cpe:2.3:a:paramiko:paramiko:1.18.5:*:*:*:*:*:*:*",{"vendor":45,"product":45,"version":52,"criteria":53,"vulnerable":4},"2.0.8","cpe:2.3:a:paramiko:paramiko:2.0.8:*:*:*:*:*:*:*",{"vendor":45,"product":45,"version":55,"criteria":56,"vulnerable":4},"2.1.5","cpe:2.3:a:paramiko:paramiko:2.1.5:*:*:*:*:*:*:*",{"vendor":45,"product":45,"version":58,"criteria":59,"vulnerable":4},"2.2.3","cpe:2.3:a:paramiko:paramiko:2.2.3:*:*:*:*:*:*:*",{"vendor":45,"product":45,"version":61,"criteria":62,"vulnerable":4},"2.3.2","cpe:2.3:a:paramiko:paramiko:2.3.2:*:*:*:*:*:*:*",{"vendor":45,"product":45,"version":64,"criteria":65,"vulnerable":4},"2.4.1","cpe:2.3:a:paramiko:paramiko:2.4.1:*:*:*:*:*:*:*",{"vendor":67,"product":68,"version":69,"criteria":70,"vulnerable":4},"redhat","ansible_tower","3.3","cpe:2.3:a:redhat:ansible_tower:3.3:*:*:*:*:*:*:*",{"vendor":67,"product":72,"version":73,"criteria":74,"vulnerable":4},"virtualization_host","4.0","cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*",{"vendor":67,"product":76,"version":77,"criteria":78,"vulnerable":4},"enterprise_linux_desktop","6.0","cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*",{"vendor":67,"product":76,"version":80,"criteria":81,"vulnerable":4},"7.0","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",{"vendor":67,"product":83,"version":77,"criteria":84,"vulnerable":4},"enterprise_linux_server","cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*",{"vendor":67,"product":83,"version":80,"criteria":86,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",{"vendor":67,"product":88,"version":89,"criteria":90,"vulnerable":4},"enterprise_linux_server_aus","6.4","cpe:2.3:o:redhat:enterprise_linux_server_aus:6.4:*:*:*:*:*:*:*",{"vendor":67,"product":88,"version":92,"criteria":93,"vulnerable":4},"6.5","cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*",{"vendor":67,"product":88,"version":95,"criteria":96,"vulnerable":4},"6.6","cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*",{"vendor":67,"product":88,"version":98,"criteria":99,"vulnerable":4},"7.6","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",{"vendor":67,"product":101,"version":102,"criteria":103,"vulnerable":4},"enterprise_linux_server_eus","6.7","cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*",{"vendor":67,"product":101,"version":98,"criteria":105,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",{"vendor":67,"product":107,"version":95,"criteria":108,"vulnerable":4},"enterprise_linux_server_tus","cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*",{"vendor":67,"product":107,"version":98,"criteria":110,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",{"vendor":67,"product":112,"version":77,"criteria":113,"vulnerable":4},"enterprise_linux_workstation","cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*",{"vendor":67,"product":112,"version":80,"criteria":115,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",{"vendor":117,"product":118,"version":119,"criteria":120,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":117,"product":118,"version":122,"criteria":123,"vulnerable":4},"9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":125,"product":126,"version":127,"criteria":128,"vulnerable":4},"canonical","ubuntu_linux","12.04","cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*",{"vendor":125,"product":126,"version":130,"criteria":131,"vulnerable":4},"14.04","cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*",{"vendor":125,"product":126,"version":133,"criteria":134,"vulnerable":4},"16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":125,"product":126,"version":136,"criteria":137,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":125,"product":126,"version":139,"criteria":140,"vulnerable":4},"18.10","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",30,[143,148,151,154,157,162,167,172,175,179,182],{"url":144,"source":145,"tags":146},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHBA-2018:3497","Red Hat",[147],"Third Party Advisory",{"url":149,"source":145,"tags":150},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3347",[147],{"url":152,"source":145,"tags":153},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3406",[147],{"url":155,"source":145,"tags":156},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3505",[147],{"url":158,"source":159,"tags":160},"https:\u002F\u002Fgithub.com\u002Fparamiko\u002Fparamiko\u002Fissues\u002F1283","GitHub",[161,147],"Patch",{"url":163,"source":164,"tags":165},"https:\u002F\u002Fherolab.usd.de\u002Fwp-content\u002Fuploads\u002Fsites\u002F4\u002Fusd20180023.txt","Usd",[166],"Broken Link",{"url":168,"source":169,"tags":170},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2018\u002F10\u002Fmsg00018.html","Debian",[171,147],"Mailing List",{"url":173,"source":169,"tags":174},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2021\u002F12\u002Fmsg00025.html",[171,147],{"url":176,"source":177,"tags":178},"https:\u002F\u002Fusn.ubuntu.com\u002F3796-1\u002F","Ubuntu",[147],{"url":180,"source":177,"tags":181},"https:\u002F\u002Fusn.ubuntu.com\u002F3796-2\u002F",[147],{"url":183,"source":177,"tags":184},"https:\u002F\u002Fusn.ubuntu.com\u002F3796-3\u002F",[147],11,[187],{"id":188,"name":189,"description":190,"extendedDescription":191,"status":192,"abstraction":193,"structure":194},"CWE-863","Incorrect Authorization","The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are incorrectly applied, users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Incomplete","Class","Simple",1,false,[],{"title":199,"metaDescription":200,"keywords":201,"canonicalUrl":202,"structuredData":203},"What is CVE-2018-1000805? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-1000805, a high severity cyber security vulnerability from 2018. Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18....","CVE-2018-1000805, CVE-2018-1000805 vulnerability, CVE-2018-1000805 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, paramiko security, redhat security, paramiko vulnerability, ansible_tower vulnerability, virtualization_host vulnerability, enterprise_linux_desktop vulnerability","\u002Fwhat-is\u002Fcve-2018-1000805",{"@context":204,"@type":205,"headline":199,"description":200,"datePublished":10,"dateModified":11,"author":206,"publisher":210,"about":214,"mainEntityOfPage":218,"articleSection":221,"keywords":222},"https:\u002F\u002Fschema.org","TechArticle",{"@type":207,"name":208,"url":209},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":207,"name":208,"url":209,"logo":211},{"@type":212,"url":213},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":215,"name":6,"description":216,"additionalType":217},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":219,"@id":220},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-1000805","Cybersecurity","CVE-2018-1000805, CVE-2018-1000805 vulnerability, CVE-2018-1000805 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[224,243,279,287],{"Operator":26,"Negate":26,"Nodes":225},[226],{"Operator":227,"Negate":26,"CPEMatch":228},"OR",[229,231,233,235,237,239,241],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":230,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A5CF78F9-64C6-49D1-93A1-14265B0800E8",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":232,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E16CBFE9-BE97-48B3-88B0-5DCA4B0B39E7",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":234,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5A48E2D2-3231-4C46-B7A9-0EA815459891",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":236,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AABBAD13-B7C0-40AB-8351-4879E33D3979",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":238,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1E4B2395-168E-4255-93B6-1AF0B657BA5A",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":240,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"CD4FAE7A-9412-4038-8EDD-03A7645918ED",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":242,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0319361D-1B16-4B49-8387-B42995EC6272",{"Operator":26,"Negate":26,"Nodes":244},[245],{"Operator":227,"Negate":26,"CPEMatch":246},[247,249,251,253,255,257,259,261,263,265,267,269,271,273,275,277],{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":248,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A5319543-0143-4E2E-AA77-B7F116C1336C",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":250,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BB28F9AF-3D06-4532-B397-96D7E4792503",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":252,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EE249E1B-A1FD-4E08-AA71-A0E1F10FFE97",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":254,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"33C068A4-3780-4EAB-A937-6082DF847564",{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":256,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"9BBCD86A-E6C7-4444-9D74-F861084090F0",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":258,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"51EF4996-72F4-4FA4-814F-F5991E7A8318",{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":260,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"AF83BB87-B203-48F9-9D06-48A5FE399050",{"Vulnerable":4,"Criteria":93,"MatchCriteriaID":262,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1F3BEFDB-5156-4E1C-80BB-8BE9FEAA7623",{"Vulnerable":4,"Criteria":96,"MatchCriteriaID":264,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"16E6D998-B41D-4B49-9E00-8336D2E40A4A",{"Vulnerable":4,"Criteria":99,"MatchCriteriaID":266,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B353CE99-D57C-465B-AAB0-73EF581127D1",{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":268,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6C81647C-9A53-481D-A54C-36770A093F90",{"Vulnerable":4,"Criteria":105,"MatchCriteriaID":270,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"BF77CDCF-B9C9-427D-B2BF-36650FB2148C",{"Vulnerable":4,"Criteria":108,"MatchCriteriaID":272,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"13E02156-E748-4820-B76F-7074793837E1",{"Vulnerable":4,"Criteria":110,"MatchCriteriaID":274,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC",{"Vulnerable":4,"Criteria":113,"MatchCriteriaID":276,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E5ED5807-55B7-47C5-97A6-03233F4FBC3A",{"Vulnerable":4,"Criteria":115,"MatchCriteriaID":278,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"825ECE2D-E232-46E0-A047-074B34DB1E97",{"Operator":26,"Negate":26,"Nodes":280},[281],{"Operator":227,"Negate":26,"CPEMatch":282},[283,285],{"Vulnerable":4,"Criteria":120,"MatchCriteriaID":284,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Vulnerable":4,"Criteria":123,"MatchCriteriaID":286,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":26,"Negate":26,"Nodes":288},[289],{"Operator":227,"Negate":26,"CPEMatch":290},[291,293,295,297,299],{"Vulnerable":4,"Criteria":128,"MatchCriteriaID":292,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"8D305F7A-D159-4716-AB26-5E38BB5CD991",{"Vulnerable":4,"Criteria":131,"MatchCriteriaID":294,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B5A6F2F3-4894-4392-8296-3B8DD2679084",{"Vulnerable":4,"Criteria":134,"MatchCriteriaID":296,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":137,"MatchCriteriaID":298,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":140,"MatchCriteriaID":300,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"07C312A0-CD2C-4B9C-B064-6409B25C278F",[],[],{"lastModified":11,"cacheTime":304,"version":32},1792353260608,{"score":306,"band":307,"action":308,"scoredAt":309},43,"Medium","Plan remediation","2026-10-16T06:44:56.42178+00:00"]