internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.
Why this VPI (explainable, experimental)
VPI breakdown
| Impact | 42.00 |
| Exploitation signal(No additional exploitation signal) | ×1.00 |
| VPI | 42.00 |
VPI formula vpi-v1