|
A critical vulnerability in Alpine Linux's OpenSSH server allows attackers to bypass password authentication and log in without credentials if the system has at least one account with no password set and another account with a password hash. Alpine Linux users are urged to immediately update openssh-server or disable password authentication by setting `PasswordAuthentication no` in the SSH configuration, as the vulnerability affects all Alpine releases from 3.16 through 3.24 and impacts systems using the standard openssh-server package or openssh-server-pam with UsePAM disabled.
Read Full Article →
← Back to latest