1 matches found
AZL-9045 CVE-2021-36368 affecting package openssh for versions less than 8.9p1-1
An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authenticatio...