WinSCP 5.1.4 Security Bug

Advertisement

false87
Guest

WinSCP 5.1.4 Security Bug

Just noticed the following:

When connected to a server (SFTP), if I reinstall that server while connected the new rsa key is not checked and WinSCP connects to the new server without warning the key has changed.

Regenerating the rsa key and rebooting the server might have the same effect, but I am unable to check this right now.

Reply with quote

Advertisement

martin
Site Admin
martin avatar
Joined:
Posts:
41,506
Location:
Prague, Czechia

Re: WinSCP 5.1.4 Security Bug

Please attach a full log file showing the problem (using the latest version of WinSCP).

To generate log file, enable logging, log in to your server and do the operation and only the operation that causes the error. Submit the log with your post as an attachment. Note that passwords and passphrases not stored in the log. You may want to remove other data you consider sensitive though, such as host names, IP addresses, account names or file names (unless they are relevant to the problem). If you do not want to post the log publicly, you can mark the attachment as private.

Reply with quote

Advertisement

You can post new topics in this forum