Home / Vulnerability Database / Python : SSH no host key verification
Python
Python : SSH no host key verification
Overview
Encryption in general is typically critical to the security of many applications. Using SSH can greatly increase security by guaranteeing the identity of the party you are communicating with. This is accomplished by one or both parties presenting trusted host keys during the connection initialization phase of SSH.
When paramiko methods are used, host keys are verified by default. If host key verification is disabled, then a severity HIGH error should be reported.
References
CRITICAL
DerScanner Severity Score
Do you want to fix Python : SSH no host key verification in your application?
See also
Python
Python : Debug mode on
Python
Python : Web3: Deprecated method
Python