CVE-2021-45885

An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8). Under a specific update-migration scenario, the first SSH password change does not properly clear the old password.

Summary:

An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8). Under a specific update-migration scenario, the first SSH password change does not properly clear the old password.

Reference Links(if available):

  • https://advisories.stormshield.eu/2021-069/
  • https://advisories.stormshield.eu
  • CVSS Score (if available)

    v2: / MEDIUM

    v3: /

    Links to Exploits(if available)