CVE-2020-14145 – The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an inf …

Vuln ID: CVE-2020-14145

Published:  2020-06-29  18:15:11Z

Description: The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client).

Source: NVD.NIST.GOV

 

Tags