Description (CNA)
A vulnerability has been identified in centraldogma-server-mirror-git versions prior to 0.84.0, where the Git mirror SSH client does not verify remote host keys for git+ssh:// connections, allowing an on-path attacker to perform man-in-the-middle attacks and compromise mirrored repositories.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| LY Corporation / Central Dogma | unaffected 0.84.0 before * |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.