← Back to browse · API

CVE-2022-45047

Severity
CRITICAL
CVSS
9.8
EPSS
0.03571
Risk score
40.45
CISA KEV
No
PoC
No
Published
2022-11-16
Modified
2026-05-01
First seen
2026-08-07
Aliases
EUVD-2022-7328, GHSA-FHW8-8J55-VWGQ
Products
Apache Software Foundation:Apache Mina SSHD unspecified ≤2.9.1
Sources
euvd EUVD-2022-7328

Description

Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.

References