Description (CNA)
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OpenBSD / OpenSSH | affected 0 before 10.6 |
CWE
CWE-99
References
ADP enrichment
No English description supplied.
No references supplied.