First published: Wed Dec 29 2021(Updated: )
An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8). Under a specific update-migration scenario, the first SSH password change does not properly clear the old password.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Stormshield Network Security | >=4.2.2<4.2.8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-45885 is an issue discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8) where the first SSH password change does not properly clear the old password.
CVE-2021-45885 has a severity level of high (7.5).
CVE-2021-45885 affects Stormshield Network Security versions 4.2.2 through 4.2.7 (fixed in 4.2.8).
To fix CVE-2021-45885, update Stormshield Network Security to version 4.2.8.
More information about CVE-2021-45885 can be found on the Stormshield Network Security advisories website.