Логотип exploitDog
bind:"CVE-2016-20012"
Консоль
Логотип exploitDog

exploitDog

bind:"CVE-2016-20012"

Количество 8

Количество 8

ubuntu логотип

CVE-2016-20012

около 4 лет назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.3
EPSS: Средний
redhat логотип

CVE-2016-20012

почти 10 лет назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.9
EPSS: Средний
nvd логотип

CVE-2016-20012

около 4 лет назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.3
EPSS: Средний
msrc логотип

CVE-2016-20012

около 4 лет назад

OpenSSH through 8.7 allows remote attackers who have a suspicion that a certain combination of username and public key is known to an SSH server to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.3
EPSS: Средний
debian логотип

CVE-2016-20012

около 4 лет назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that ...

CVSS3: 5.3
EPSS: Средний
github логотип

GHSA-84j4-ccmw-hwpg

больше 3 лет назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session.

CVSS3: 5.3
EPSS: Средний
fstec логотип

BDU:2022-01880

больше 23 лет назад

Уязвимость средства криптографической защиты OpenSSH, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным

CVSS3: 5.3
EPSS: Средний
redos логотип

ROS-20250505-12

7 месяцев назад

Уязвимость openssh

CVSS3: 5.3
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2016-20012

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.3
15%
Средний
около 4 лет назад
redhat логотип
CVE-2016-20012

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.9
15%
Средний
почти 10 лет назад
nvd логотип
CVE-2016-20012

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.3
15%
Средний
около 4 лет назад
msrc логотип
CVE-2016-20012

OpenSSH through 8.7 allows remote attackers who have a suspicion that a certain combination of username and public key is known to an SSH server to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.3
15%
Средний
около 4 лет назад
debian логотип
CVE-2016-20012

OpenSSH through 8.7 allows remote attackers, who have a suspicion that ...

CVSS3: 5.3
15%
Средний
около 4 лет назад
github логотип
GHSA-84j4-ccmw-hwpg

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session.

CVSS3: 5.3
15%
Средний
больше 3 лет назад
fstec логотип
BDU:2022-01880

Уязвимость средства криптографической защиты OpenSSH, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным

CVSS3: 5.3
15%
Средний
больше 23 лет назад
redos логотип
ROS-20250505-12

Уязвимость openssh

CVSS3: 5.3
15%
Средний
7 месяцев назад

Уязвимостей на страницу