General : Revoked 'known_hosts' SSH Key Detection (Linux/Unix SSH Login)

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.104660

Category: General

Title: Revoked 'known_hosts' SSH Key Detection (Linux/Unix SSH Login)

Summary: The remote host is using (a) revoked SSH key(s) in (a); 'known_hosts' file(s).

Description: Summary:
The remote host is using (a) revoked SSH key(s) in (a)
'known_hosts' file(s).

Vulnerability Impact:
An attacker could use this situation to compromise or eavesdrop
on the SSH communication between the client and the server using a man-in-the-middle attack.

Solution:
Remove the revoked SSH key(s) from the reported 'known_hosts'
file(s).

CVSS Score:
3.3

CVSS Vector:
AV:A/AC:L/Au:N/C:P/I:N/A:N

Copyright Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.104660
Category:	General
Title:	Revoked 'known_hosts' SSH Key Detection (Linux/Unix SSH Login)
Summary:	The remote host is using (a) revoked SSH key(s) in (a); 'known_hosts' file(s).
Description:	Summary: The remote host is using (a) revoked SSH key(s) in (a) 'known_hosts' file(s). Vulnerability Impact: An attacker could use this situation to compromise or eavesdrop on the SSH communication between the client and the server using a man-in-the-middle attack. Solution: Remove the revoked SSH key(s) from the reported 'known_hosts' file(s). CVSS Score: 3.3 CVSS Vector: AV:A/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2023 Greenbone AG