CVE-2025-41256
Cyberduck and Mountain Duck - Weak Hash Algorithm for Certificate Fingerprint
Résumé
Cyberduck and Mountain Duck - Weak Hash Algorithm for Certificate Fingerprint
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Cyberduck and Mountain Duck improper handle TLS certificate pinning for untrusted certificates (e.g., self-signed), since the certificate fingerprint is stored as SHA-1, although SHA-1 is considered weak.
This issue affects Cyberduck: through 9.1.6; Mountain Duck: through 4.17.5.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- package github.com