CVEvulnerability

CVE-2025-59339

4.4 MEDIUM Published 2025-09-17 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-09-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-325

Description

The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. Session-recording ttyrec files, may be handled by the provided osh-encrypt-rsync script that is a helper to rotate, encrypt, sign, copy, and optionally move them to a remote storage periodically, if configured to. When running, the script properly rotates and encrypts the files using the provided GPG key(s), but silently fails to sign them, even if asked to.

Related

Weakness · CWE (1)

  • CWE-325 Missing Cryptographic Step weakness

References