In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config.
| Vendor | Product | Versions |
|---|---|---|
| openbsd | openssh | 0, < 10.3 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| ibm | qradar siem | cert_advisory | 90% |
| open source | openssh | cert_advisory | 90% |
Updated severity to MEDIUM, CVSS estimate to 4.0, and added tag 'problematic'.
Initial creation
