Vulnerabilities
Rex 1.16.1 Hardcodes SSH to Disable Host Key Checks, Risking Man-in-the-Middle Attacks
Rex versions through 1.16.1 hardcode strict host key checking to no, enabling potential man-in-the-middle attacks during remote rsync transfers.
SSH
Everything NetSec Tribune has reported about SSH: 2 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Jpom Authorization Flaw Lets Users Steal Files Across Workspaces
Authenticated users in Jpom versions through 2.11.12 can bypass workspace isolation to manipulate files on other users' SSH hosts.