Unrated
An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked n...
CVE-2021-36370
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2021-36370 mc Fixed in: 3:4.8.27-1
Original description The description as published by the source.
An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity.
References
- advisory mail.gnome.org
- advisory midnight-commander.org
- advisory sourceforge.net
- report docs.ssh-mitm.at
- report github.com
- report github.com