[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwGxE6x-TM-Y369LZRtn6TDu0CIJgUsnNFtq5DrVlTOM":3,"g5a-risk:CVE-2017-15906":322},{"success":4,"data":5,"meta":320},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":26,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":131,"references":132,"referencesCount":192,"weaknesses":193,"weaknessesCount":202,"isActivelyExploited":203,"cisaInfo":26,"otxData":26,"relatedBlogPosts":204,"seoMetadata":205,"configurations":230,"relatedVendorCves":318,"notableEvents":319},"CVE-2017-15906","What is CVE-2017-15906?","The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.","The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to creat...","2017-10-26T03:29:00.22","2025-04-20T01:37:25.86",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":25,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":34,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",5,10,2.9,0.03359,[38,38,38,38,38,38,38],"Medium",[42,47,52,57,62,65,68,71,74,77,80,83,86,89,92,95,97,100,103,108,112,115,118,121,123,126,128],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"openbsd","openssh","*","cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"oracle","sun_zfs_storage_appliance_kit","8.8.6","cpe:2.3:a:oracle:sun_zfs_storage_appliance_kit:8.8.6:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"debian","debian_linux","8.0","cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",{"vendor":58,"product":59,"version":60,"criteria":61,"vulnerable":4},"netapp","active_iq_unified_manager","-","cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",{"vendor":58,"product":63,"version":60,"criteria":64,"vulnerable":4},"cloud_backup","cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",{"vendor":58,"product":66,"version":60,"criteria":67,"vulnerable":4},"clustered_data_ontap","cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",{"vendor":58,"product":69,"version":60,"criteria":70,"vulnerable":4},"data_ontap_edge","cpe:2.3:a:netapp:data_ontap_edge:-:*:*:*:*:*:*:*",{"vendor":58,"product":72,"version":60,"criteria":73,"vulnerable":4},"hci_management_node","cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",{"vendor":58,"product":75,"version":60,"criteria":76,"vulnerable":4},"oncommand_unified_manager_core_package","cpe:2.3:a:netapp:oncommand_unified_manager_core_package:-:*:*:*:*:*:*:*",{"vendor":58,"product":78,"version":60,"criteria":79,"vulnerable":4},"solidfire","cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",{"vendor":58,"product":81,"version":60,"criteria":82,"vulnerable":4},"steelstore_cloud_integrated_storage","cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:*",{"vendor":58,"product":84,"version":45,"criteria":85,"vulnerable":4},"storage_replication_adapter_for_clustered_data_ontap","cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",{"vendor":58,"product":84,"version":87,"criteria":88,"vulnerable":4},"9.6","cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6:*:*:*:*:vmware_vsphere:*:*",{"vendor":58,"product":90,"version":45,"criteria":91,"vulnerable":4},"vasa_provider_for_clustered_data_ontap","cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",{"vendor":58,"product":93,"version":45,"criteria":94,"vulnerable":4},"virtual_storage_console","cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",{"vendor":58,"product":93,"version":87,"criteria":96,"vulnerable":4},"cpe:2.3:a:netapp:virtual_storage_console:9.6:*:*:*:*:vmware_vsphere:*:*",{"vendor":58,"product":98,"version":60,"criteria":99,"vulnerable":4},"cn1610_firmware","cpe:2.3:o:netapp:cn1610_firmware:-:*:*:*:*:*:*:*",{"vendor":58,"product":101,"version":60,"criteria":102,"vulnerable":4},"cn1610","cpe:2.3:h:netapp:cn1610:-:*:*:*:*:*:*:*",{"vendor":104,"product":105,"version":106,"criteria":107,"vulnerable":4},"redhat","enterprise_linux_desktop","7.0","cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*",{"vendor":104,"product":109,"version":110,"criteria":111,"vulnerable":4},"enterprise_linux_eus","7.6","cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:*",{"vendor":104,"product":109,"version":113,"criteria":114,"vulnerable":4},"7.7","cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:*",{"vendor":104,"product":116,"version":106,"criteria":117,"vulnerable":4},"enterprise_linux_server","cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*",{"vendor":104,"product":119,"version":110,"criteria":120,"vulnerable":4},"enterprise_linux_server_aus","cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",{"vendor":104,"product":119,"version":113,"criteria":122,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",{"vendor":104,"product":124,"version":110,"criteria":125,"vulnerable":4},"enterprise_linux_server_tus","cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",{"vendor":104,"product":124,"version":113,"criteria":127,"vulnerable":4},"cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",{"vendor":104,"product":129,"version":106,"criteria":130,"vulnerable":4},"enterprise_linux_workstation","cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",27,[133,139,143,147,151,156,160,164,170,174,176,178,180,182,184,186,188,190],{"url":134,"source":135,"tags":136},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F101552","Securityfocus",[137,138],"Third Party Advisory","VDB Entry",{"url":140,"source":141,"tags":142},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:0980","Red Hat",[137],{"url":144,"source":145,"tags":146},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fpdf\u002Fssa-412672.pdf","Siemens",[],{"url":148,"source":149,"tags":150},"https:\u002F\u002Fgithub.com\u002Fopenbsd\u002Fsrc\u002Fcommit\u002Fa6981567e8e215acc1ef690c8dbb30f2d9b00a19","GitHub",[137],{"url":152,"source":153,"tags":154},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2018\u002F09\u002Fmsg00010.html","Debian",[155,137],"Mailing List",{"url":157,"source":158,"tags":159},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201801-05","Gentoo",[137],{"url":161,"source":162,"tags":163},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20180423-0004\u002F","Netapp",[137],{"url":165,"source":166,"tags":167},"https:\u002F\u002Fwww.openssh.com\u002Ftxt\u002Frelease-7.6","Openssh",[168,169],"Release Notes","Vendor Advisory",{"url":171,"source":172,"tags":173},"https:\u002F\u002Fwww.oracle.com\u002Fsecurity-alerts\u002Fcpujan2020.html","Oracle",[137],{"url":134,"source":135,"tags":175},[137,138],{"url":140,"source":141,"tags":177},[137],{"url":144,"source":145,"tags":179},[],{"url":148,"source":149,"tags":181},[137],{"url":152,"source":153,"tags":183},[155,137],{"url":157,"source":158,"tags":185},[137],{"url":161,"source":162,"tags":187},[137],{"url":165,"source":166,"tags":189},[168,169],{"url":171,"source":172,"tags":191},[137],18,[194],{"id":195,"name":196,"description":197,"extendedDescription":198,"status":199,"abstraction":200,"structure":201},"CWE-732","Incorrect Permission Assignment for Critical Resource","The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.","When a resource is given a permission setting that provides access to a wider range of actors than required, it could lead to the exposure of sensitive information, or the modification of that resource by unintended parties. This is especially dangerous when the resource is related to program configuration, execution, or sensitive user data. For example, consider a misconfigured storage account for the cloud that can be read or written by a public or anonymous user.","Draft","Class","Simple",1,false,[],{"title":206,"metaDescription":207,"keywords":208,"canonicalUrl":209,"structuredData":210},"What is CVE-2017-15906? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2017-15906, a medium severity cyber security vulnerability from 2017. The process_open function in sftp-server.c in OpenSSH bef...","CVE-2017-15906, CVE-2017-15906 vulnerability, CVE-2017-15906 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, openbsd security, oracle security, debian security, netapp security, openssh vulnerability, sun_zfs_storage_appliance_kit vulnerability, debian_linux vulnerability, active_iq_unified_manager vulnerability","\u002Fwhat-is\u002Fcve-2017-15906",{"@context":211,"@type":212,"headline":206,"description":207,"datePublished":10,"dateModified":11,"author":213,"publisher":217,"about":221,"mainEntityOfPage":225,"articleSection":228,"keywords":229},"https:\u002F\u002Fschema.org","TechArticle",{"@type":214,"name":215,"url":216},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":214,"name":215,"url":216,"logo":218},{"@type":219,"url":220},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":222,"name":6,"description":223,"additionalType":224},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":226,"@id":227},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2017-15906","Cybersecurity","CVE-2017-15906, CVE-2017-15906 vulnerability, CVE-2017-15906 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[231,238,244,250,285,296],{"Operator":26,"Negate":26,"Nodes":232},[233],{"Operator":234,"Negate":26,"CPEMatch":235},"OR",[236],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":237,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":110,"VersionEndIncluding":26},"AD490B42-DD19-477D-B3C0-B9CE4D14FB16",{"Operator":26,"Negate":26,"Nodes":239},[240],{"Operator":234,"Negate":26,"CPEMatch":241},[242],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":243,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"517A2282-C254-49EB-A52D-FC2B45E70ADD",{"Operator":26,"Negate":26,"Nodes":245},[246],{"Operator":234,"Negate":26,"CPEMatch":247},[248],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":249,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C11E6FB0-C8C0-4527-9AA0-CB9B316F8F43",{"Operator":26,"Negate":26,"Nodes":251},[252],{"Operator":234,"Negate":26,"CPEMatch":253},[254,256,258,260,262,264,266,268,270,273,275,279,281,283],{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":255,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":257,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5C2089EE-5D7F-47EC-8EA5-0F69790564C4",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":259,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1FE996B1-6951-4F85-AA58-B99A379D2163",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":261,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E0C4B1E5-75BF-43AE-BBAC-0DD4124C71ED",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":263,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A3C19813-E823-456A-B1CE-EC0684CE1953",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":265,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"0A4D418D-B526-46B9-B439-E1963BF88C0A",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":267,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":269,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"E94F7F59-1785-493F-91A7-5F5EA5E87E4D",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":271,"VersionStartExcluding":26,"VersionStartIncluding":272,"VersionEndExcluding":26,"VersionEndIncluding":26},"9DBEE506-E864-4FC6-B5D3-7E134438592C","9.7",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":274,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B92F025C-D612-4A64-B138-E6B4B113B504",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":276,"VersionStartExcluding":26,"VersionStartIncluding":277,"VersionEndExcluding":26,"VersionEndIncluding":278},"493789AC-966C-48F4-900B-949EFA689E2F","6.0","6.2",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":280,"VersionStartExcluding":26,"VersionStartIncluding":272,"VersionEndExcluding":26,"VersionEndIncluding":26},"5E73AC99-34AC-4D4B-A946-34F33AAEC4A1",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":282,"VersionStartExcluding":26,"VersionStartIncluding":272,"VersionEndExcluding":26,"VersionEndIncluding":26},"D4BE7695-11DB-4F04-A469-91A29A83B358",{"Vulnerable":4,"Criteria":96,"MatchCriteriaID":284,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3B82868F-6BBC-40D7-B410-1BCFF2C70B4B",{"Operator":286,"Negate":26,"Nodes":287},"AND",[288,292],{"Operator":234,"Negate":26,"CPEMatch":289},[290],{"Vulnerable":4,"Criteria":99,"MatchCriteriaID":291,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EB30733E-68FC-49C4-86C0-7FEE75C366BF",{"Operator":234,"Negate":26,"CPEMatch":293},[294],{"Vulnerable":26,"Criteria":102,"MatchCriteriaID":295,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6361DAC6-600F-4B15-8797-D67F298F46FB",{"Operator":26,"Negate":26,"Nodes":297},[298],{"Operator":234,"Negate":26,"CPEMatch":299},[300,302,304,306,308,310,312,314,316],{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":301,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"33C068A4-3780-4EAB-A937-6082DF847564",{"Vulnerable":4,"Criteria":111,"MatchCriteriaID":303,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5BF3C7A5-9117-42C7-BEA1-4AA378A582EF",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":305,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"83737173-E12E-4641-BC49-0BD84A6B29D0",{"Vulnerable":4,"Criteria":117,"MatchCriteriaID":307,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"51EF4996-72F4-4FA4-814F-F5991E7A8318",{"Vulnerable":4,"Criteria":120,"MatchCriteriaID":309,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B353CE99-D57C-465B-AAB0-73EF581127D1",{"Vulnerable":4,"Criteria":122,"MatchCriteriaID":311,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"7431ABC1-9252-419E-8CC1-311B41360078",{"Vulnerable":4,"Criteria":125,"MatchCriteriaID":313,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B76AA310-FEC7-497F-AF04-C3EC1E76C4CC",{"Vulnerable":4,"Criteria":127,"MatchCriteriaID":315,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"17F256A9-D3B9-4C72-B013-4EFD878BFEA8",{"Vulnerable":4,"Criteria":130,"MatchCriteriaID":317,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"825ECE2D-E232-46E0-A047-074B34DB1E97",[],[],{"lastModified":11,"cacheTime":321,"version":32},1793220058838,{"score":323,"band":40,"action":324,"scoredAt":325},40,"Plan remediation","2026-10-28T06:42:49.362549+00:00"]