CVEs-PoC/2022/CVE-2022-24302.md

CVE-2022-24302

Description

In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.

POC

Reference

• https://www.paramiko.org/changelog.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/seal-community/patches