Threats tagged 'ghsa-xmw3-crh7-9hmm'

sshportal versions up to 1.19.5 have a missing authorization vulnerability in the management shell 'key show' command. This flaw allows authenticated non-admin users to retrieve decrypted backend private SSH keys by requesting predictable key names such as 'default' or 'host'. Exploiting this vulnerability enables attackers to connect directly to backend hosts, bypassing access control lists (ACLs) and session recording mechanisms.