CVE-2025-66406
Improper Authorization Check for SSH Certificate Revocation
概要
Improper Authorization Check for SSH Certificate Revocation
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Step CA is an online certificate authority for secure, automated certificate management for DevOps. Prior to 0.29.0, there is an improper authorization check for SSH certificate revocation. This affects deployments configured with the SSHPOP provisioner. This vulnerability is fixed in 0.29.0.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov