SEC-CONSULT Security Advisory – Linbit Linbox is vulnerable to authentication circumvention on its administration portal, password disclosure for all existing users, and using the obtained passwords, any account can be logged into via SSH.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/32980/linbit.txt
Source: https://packetstormsecurity.com/files/32980/linbit.txt.html