From 7a5b3387b7600c41bfcd0b799b684ada51187163 Mon Sep 17 00:00:00 2001 From: Manoj Ampalam Date: Fri, 18 Aug 2017 12:18:11 -0700 Subject: [PATCH] Created Security Considerations (markdown) --- Security-Considerations.md | 3 +++ 1 file changed, 3 insertions(+) create mode 100644 Security-Considerations.md diff --git a/Security-Considerations.md b/Security-Considerations.md new file mode 100644 index 0000000..e0c902d --- /dev/null +++ b/Security-Considerations.md @@ -0,0 +1,3 @@ +Following security limitations need to be considered while evaluating Win32 OpenSSH +- Global [ssh_config](https://github.com/PowerShell/Win32-OpenSSH/issues/847) and [known_hosts](https://github.com/PowerShell/Win32-OpenSSH/issues/466) are not honored. +- [Elevation of Privilege over loopback](Elevation of privilege over loopback) on misconfigured machines.