CVE-2026-11745
2026-06-22
03h16 +00:00
03h16 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
CVE 描述
A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH client does not verify remote host keys for git+ssh:// connections, allowing an on-path attacker to perform man-in-the-middle attacks and compromise mirrored repositories.
CVE 資訊
相關弱點
| 弱點名稱 | 來源 | |
|---|---|---|
| Key Exchange without Entity Authentication The product performs a key exchange with an actor without verifying the identity of that actor. |
