← Database

CVE-2022-45047

CRITICAL CVSS: 9.8 Published: 2022-11-16 Modified: 2026-06-17

Description

Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.

Affected Platforms

Apache Sshd

Weakness Type

CWE-502, CWE-502

References