← Database

CVE-2008-5124

HIGH CVSS: 7.5 Published: 2008-11-18 Modified: 2026-06-16

Description

JSCAPE Secure FTP Applet 4.8.0 and earlier does not ask the user to verify a new or mismatched SSH host key, which makes it easier for remote attackers to perform man-in-the-middle attacks.

Affected Platforms

Jscape Secure Ftp Applet

Weakness Type

CWE-287

References