CVE-1999-1010

Summary

CVE-1999-1010 is a vulnerability affecting SSH 1.2.27 servers. Despite server policies disallowing it, clients can still use the "none" cipher during connections. This cipher offers no encryption, leaving data transmitted between the client and server vulnerable to interception and decryption by unauthorized parties. This issue poses a significant risk for sensitive information, as it can be easily read or modified during transmission. To mitigate this vulnerability, it is recommended that affected servers be updated to a more secure version of SSH.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.