Threats tagged 'ghsa-mqc5-8mg9-qrvq'

C-Kermit versions from 7.0.197 up to but not including 11.1.515 contain an authentication bypass vulnerability in the IKSD SSL build. This flaw causes the Telnet authentication state to remain at AUTH_VALID after a refused certificate login. An attacker possessing a trusted certificate mapped to a refused account can exploit this to log in as any other account with any password, gaining shell access to that account.