Uploaded image for project: 'Qt Creator'
  1. Qt Creator
  2. QTCREATORBUG-13339

SSH Client Does Not Verify Hostkey Fingerprints

XMLWordPrintable

    • 62a83f911365eab71e7260484517ef6c739d5192

      The ssh client in qt creator does not check the fingerprint of the remote device, leading to a trivial man in the middle attack.

      This is a security bug, which will likely require a CVE assigned.

      This affects all versions.

        1. 0001-Verify-host-key.patch
          5 kB
          Jason A. Donenfeld
        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

            kandeler Christian Kandeler
            zx2c4 Jason A. Donenfeld
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved:

                There are no open Gerrit changes