Medium severity · published Aug 28, 2018
CVE-2018-15919
Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use
5.3
CVSS
3.6%
EPSS
No
On KEV
Description
Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or "oracle") as a vulnerability.'
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.6% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CB
Cloud Backup · Netapp
All versions, or not specified · source: NVD
CF
Cn1610 Firmware · Netapp
All versions, or not specified · source: NVD
DO
Data Ontap Edge · Netapp
All versions, or not specified · source: NVD
OS
Ontap Select Deploy · Netapp
All versions, or not specified · source: NVD
OP
Openssh · Openbsd
5.9 through 7.8 · source: NVD
ST
Steelstore · Netapp
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-15919
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-15919
Mailing List
http://seclists.org/oss-sec/2018/q3/180
Third Party Advisory
http://www.securityfocus.com/bid/105163
Third Party Advisory
https://security.netapp.com/advisory/ntap-20181221-0001/
More from Cloud Backup
9.8
CVE-2021-42013
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
9.8
CVE-2021-41773
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
9.0
CVE-2021-40438
mod_proxy SSRF
7.8
CVE-2021-22555
Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACE
7.8
CVE-2021-3156
Sudo Heap-Based Buffer Overflow Vulnerability