Cochise
Monthly
Improper SSH host key validation in andreashappe/cochise through version 0.4.1 allows a network-positioned attacker to perform Man-in-the-Middle attacks against SSH sessions established by the tool. The vulnerable component is the `asyncssh.connect()` call in `src/cochise/ssh_connection.py`, where the SSH Host Key Handler fails to verify server host keys, enabling silent impersonation of target SSH hosts. A public proof-of-concept exists as GitHub issue #13; no vendor patch has been released and the maintainer had not responded to the disclosure at time of reporting.
Improper SSH host key validation in andreashappe/cochise through version 0.4.1 allows a network-positioned attacker to perform Man-in-the-Middle attacks against SSH sessions established by the tool. The vulnerable component is the `asyncssh.connect()` call in `src/cochise/ssh_connection.py`, where the SSH Host Key Handler fails to verify server host keys, enabling silent impersonation of target SSH hosts. A public proof-of-concept exists as GitHub issue #13; no vendor patch has been released and the maintainer had not responded to the disclosure at time of reporting.