Information Disclosure Vulnerability in Paramiko by IronPort Systems
CVE-2008-0299
Currently unrated
What is CVE-2008-0299?
In versions of Paramiko prior to 1.7.1, an information disclosure vulnerability exists due to improper management of the RandomPool when utilizing threads or forked processes. This design flaw enables one session to potentially expose sensitive information from other active sessions by accurately predicting the state of the RandomPool. This can lead to unauthorized access to critical session data, compromising the integrity and confidentiality of the system.