Lucene search

K
cvelistMitreCVELIST:CVE-2018-15919
HistoryAug 28, 2018 - 8:00 a.m.

CVE-2018-15919

2018-08-2808:00:00
mitre
www.cve.org

5.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%

Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states ‘We understand that the OpenSSH developers do not want to treat such a username enumeration (or “oracle”) as a vulnerability.’

5.2 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.7%