CVE-2022-24302

Published March 17th, 2022

View on NVD ↗

CVSS v3

5.9

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

paramiko/paramiko

The leading native Python SSHv2 protocol library.

GitHub

9.78K