Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-16259
9.8
CRITICALCVSS v3
Published
October 28, 2020
CVSS v2
10 HIGH
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
Winston 1.5.4 devices have an SSH user account with access from bastion hosts. This is undocumented in device documents and is not announced to the user.
NPM
GitHub