CVE-2010-4478

OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters...

7.5 High

OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol, a related issue to CVE-2010-4252.

Exploit likelihood

4.36%Up 3.0 points since Feb 4, 2022

What each source reports

CVE List 9.8

Record: CVE-2010-4478
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-287
Updated: 2026-11-02

EUVDEUVD-2010-4446 9.8

Record: EUVD-2010-4446
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

GitHub AdvisoriesGHSA-7m62-4jfr-67wh 9.8

OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters...

Record: GHSA-7m62-4jfr-67wh
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-287
Updated: 2026-11-02

NVD 9.8

Record: CVE-2010-4478
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness: CWE-287
Updated: 2026-11-02

OSVBELL-CVE-2010-4478 9.8

CVE-2010-4478 does not affect BellSoft software

Record: BELL-CVE-2010-4478
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

Affected products

openbsd openssh

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-4478 is a high vulnerability (CVSS 7.5) in Openbsd Openssh, published December 6, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.36%, the 91st percentile. No source names a fixed version.

References

Show 5 moreShow less