Files
codeql/python/ql/test/query-tests/Security/CWE-295-MissingHostKeyValidation/paramiko_host_key.py
2026-06-15 16:15:17 +01:00

21 lines
652 B
Python

from paramiko.client import AutoAddPolicy, WarningPolicy, RejectPolicy, SSHClient
client = SSHClient()
client.set_missing_host_key_policy(AutoAddPolicy) # $ Alert # bad
client.set_missing_host_key_policy(RejectPolicy) # good
client.set_missing_host_key_policy(WarningPolicy) # $ Alert # bad
# Using instances
client.set_missing_host_key_policy(AutoAddPolicy()) # $ Alert # bad
client.set_missing_host_key_policy(RejectPolicy()) # good
client.set_missing_host_key_policy(WarningPolicy()) # $ Alert # bad
# different import
import paramiko
client = paramiko.SSHClient()
client.set_missing_host_key_policy(paramiko.AutoAddPolicy) # $ Alert # bad