Логотип exploitDog
bind:"GHSA-84j4-ccmw-hwpg" OR bind:"CVE-2016-20012"
Консоль
Логотип exploitDog

exploitDog

bind:"GHSA-84j4-ccmw-hwpg" OR bind:"CVE-2016-20012"

Количество 7

Количество 7

github логотип

GHSA-84j4-ccmw-hwpg

около 3 лет назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session.

CVSS3: 5.3
EPSS: Средний
ubuntu логотип

CVE-2016-20012

почти 4 года назад

** DISPUTED ** OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product.

CVSS3: 5.3
EPSS: Средний
redhat логотип

CVE-2016-20012

больше 9 лет назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.9
EPSS: Средний
nvd логотип

CVE-2016-20012

почти 4 года назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.3
EPSS: Средний
debian логотип

CVE-2016-20012

почти 4 года назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that ...

CVSS3: 5.3
EPSS: Средний
fstec логотип

BDU:2022-01880

около 23 лет назад

Уязвимость средства криптографической защиты OpenSSH, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным

CVSS3: 5.3
EPSS: Средний
redos логотип

ROS-20250505-12

около 2 месяцев назад

Уязвимость openssh

CVSS3: 5.3
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-84j4-ccmw-hwpg

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session.

CVSS3: 5.3
14%
Средний
около 3 лет назад
ubuntu логотип
CVE-2016-20012

** DISPUTED ** OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product.

CVSS3: 5.3
14%
Средний
почти 4 года назад
redhat логотип
CVE-2016-20012

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.9
14%
Средний
больше 9 лет назад
nvd логотип
CVE-2016-20012

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.3
14%
Средний
почти 4 года назад
debian логотип
CVE-2016-20012

OpenSSH through 8.7 allows remote attackers, who have a suspicion that ...

CVSS3: 5.3
14%
Средний
почти 4 года назад
fstec логотип
BDU:2022-01880

Уязвимость средства криптографической защиты OpenSSH, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным

CVSS3: 5.3
14%
Средний
около 23 лет назад
redos логотип
ROS-20250505-12

Уязвимость openssh

CVSS3: 5.3
14%
Средний
около 2 месяцев назад

Уязвимостей на страницу