An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose and an attacker has silently modified the server to support the None authentication option then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is "this is not an authentication bypass since nothing is being bypassed.

🗓️ 20 Mar 2022 07:00:00Reported by MicrosoftType

OpenSSH before 8.9 may hide FIDO consent for public-key auth with agent forwarding when None authentication is enabled.

Reporter	Title	Published	Views	Family All 58
ATTACKERKB	CVE-2021-36368	13 Mar 202200:15	–	attackerkb
AlpineLinux	CVE-2021-36368	12 Mar 202223:24	–	alpinelinux
CBLMariner	CVE-2021-36368 affecting package openssh 8.8p1-2	3 Nov 202200:44	–	cbl_mariner
CBLMariner	CVE-2021-36368 affecting package openssh for versions less than 8.9p1-1	10 Aug 202316:37	–	cbl_mariner
Circl	CVE-2021-36368	12 Sep 202209:43	–	circl
CNNVD	OpenSSH 授权问题漏洞	13 Mar 202200:00	–	cnnvd
CVE	CVE-2021-36368	12 Mar 202223:24	–	cve
Cvelist	CVE-2021-36368	12 Mar 202223:24	–	cvelist
Debian CVE	CVE-2021-36368	12 Mar 202223:24	–	debiancve
Tenable Nessus	EulerOS 2.0 SP9 : openssh (EulerOS-SA-2022-1976)	8 Jul 202200:00	–	nessus