CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Apache, Java.
CVE
CVE-2022-45047
Severity
CRITICAL
CVSS
9.8
EPSS
3.57%
Apache Java
Original NVD Description
Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.
Related CVEs
Other vulnerabilities affecting the same vendor(s)