[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXzm6ABGJhpMcvHvL2js2xcT40I6gEhsPGbe7PZtNWrE":3,"g5a-risk:CVE-2023-28531":148},{"success":4,"data":5,"meta":145},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":31,"epssPercentile":26,"epssTimeSeries":32,"severity":34,"affectedProducts":35,"affectedProductsCount":52,"references":53,"referencesCount":90,"weaknesses":91,"weaknessesCount":95,"isActivelyExploited":96,"cisaInfo":26,"otxData":26,"relatedBlogPosts":97,"seoMetadata":98,"configurations":123,"relatedVendorCves":143,"notableEvents":144},"CVE-2023-28531","What is CVE-2023-28531?","ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.","2023-03-17T04:15:14.553","2025-11-04T19:15:41.43",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":29,"CVSSMetricV2":30,"CVSSMetricV40":26},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[],[],0.0299,[33,33,33,33,33,31,31],0.02267,"Critical",[36,41,46,49],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"openbsd","openssh","*","cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"netapp","brocade_fabric_operating_system","-","cpe:2.3:o:netapp:brocade_fabric_operating_system:-:*:*:*:*:*:*:*",{"vendor":42,"product":47,"version":44,"criteria":48,"vulnerable":4},"hci_bootstrap_os","cpe:2.3:o:netapp:hci_bootstrap_os:-:*:*:*:*:*:*:*",{"vendor":42,"product":50,"version":44,"criteria":51,"vulnerable":4},"solidfire_element_os","cpe:2.3:o:netapp:solidfire_element_os:-:*:*:*:*:*:*:*",4,[54,58,63,67,71,77,79,82,84,86,88],{"url":55,"source":56,"tags":57},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FAN2UDTXEUSKFIOIYMV6JNI5VSBMYZOFT\u002F","Fedoraproject",[],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202307-01","Gentoo",[62],"Third Party Advisory",{"url":64,"source":65,"tags":66},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20230413-0008\u002F","Netapp",[62],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2023\u002Fdsa-5586","Debian",[],{"url":72,"source":73,"tags":74},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F03\u002F15\u002F8","Openwall",[75,76],"Mailing List","Release Notes",{"url":55,"source":56,"tags":78},[],{"url":80,"source":56,"tags":81},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce@lists.fedoraproject.org\u002Fmessage\u002FAN2UDTXEUSKFIOIYMV6JNI5VSBMYZOFT\u002F",[],{"url":59,"source":60,"tags":83},[62],{"url":64,"source":65,"tags":85},[62],{"url":68,"source":69,"tags":87},[],{"url":72,"source":73,"tags":89},[75,76],11,[92],{"id":93,"name":93,"description":94},"Unknown","NVD-CWE-noinfo",1,false,[],{"title":99,"metaDescription":100,"keywords":101,"canonicalUrl":102,"structuredData":103},"What is CVE-2023-28531? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-28531, a critical severity cyber security vulnerability from 2023. ssh-add in OpenSSH before 9.3 adds smartcard keys to ss...","CVE-2023-28531, CVE-2023-28531 vulnerability, CVE-2023-28531 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, openbsd security, netapp security, openssh vulnerability, brocade_fabric_operating_system vulnerability, hci_bootstrap_os vulnerability, solidfire_element_os vulnerability","\u002Fwhat-is\u002Fcve-2023-28531",{"@context":104,"@type":105,"headline":99,"description":100,"datePublished":9,"dateModified":10,"author":106,"publisher":110,"about":114,"mainEntityOfPage":118,"articleSection":121,"keywords":122},"https:\u002F\u002Fschema.org","TechArticle",{"@type":107,"name":108,"url":109},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":107,"name":108,"url":109,"logo":111},{"@type":112,"url":113},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":115,"name":6,"description":116,"additionalType":117},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":119,"@id":120},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-28531","Cybersecurity","CVE-2023-28531, CVE-2023-28531 vulnerability, CVE-2023-28531 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[124,133],{"Operator":26,"Negate":26,"Nodes":125},[126],{"Operator":127,"Negate":96,"CPEMatch":128},"OR",[129],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":130,"VersionStartExcluding":26,"VersionStartIncluding":131,"VersionEndExcluding":132,"VersionEndIncluding":26},"84F1ED1E-4AD0-4903-A9FD-F4BBC21328E4","8.9","9.3",{"Operator":26,"Negate":26,"Nodes":134},[135],{"Operator":127,"Negate":96,"CPEMatch":136},[137,139,141],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":138,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A2119FFC-08F9-4C3F-881C-9C72916BC652",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":140,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1C767AA1-88B7-48F0-9F31-A89D16DCD52C",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":142,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6E379272-A79A-4A27-9861-71DCBD4B1FEF",[],[],{"lastModified":10,"cacheTime":146,"version":147},1792264669197,"2.0",{"score":149,"band":150,"action":151,"scoredAt":152},56,"Medium","Plan remediation","2026-10-16T06:57:25.951139+00:00"]