Fleet doesn’t validate a server’s certificate when connecting through SSH in github.com/rancher/fleet
Fleet doesn’t validate a server’s certificate when connecting through SSH in github.com/rancher/fleet
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-23390US | — | — | ||
A vulnerability has been identified within Fleet where, by default, Fleet will automatically trust a remote server’s certificate when connecting through SSH if the certificate isn’… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/rancher/fleet/pull/3571FIX
- https://github.com/rancher/fleet/pull/3572FIX
- https://github.com/rancher/fleet/pull/3573FIX
- https://github.com/rancher/fleet/releases/tag/v0.10.12WEB
- https://github.com/rancher/fleet/releases/tag/v0.11.7WEB
- https://github.com/rancher/fleet/releases/tag/v0.12.2WEB
- https://github.com/rancher/fleet/security/advisories/GHSA-xgpc-q899-67p8ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan