Threats tagged 'ghsa-q96c-xxv5-mmv9'

Jadaptive Maverick Synergy Server versions before 3.0.33 and 3.1.x before 3.1.7, as well as Maverick Legacy Server before 1.8.1, have an authentication bypass vulnerability in SSH public key authentication. This flaw allows attackers with a key authorized for one account to authenticate and then switch usernames on the same connection to gain access to other accounts without proper authorization.