Disable PermitUserEnvironment

PermitUserEnvironment allows users to set SSH environment variables, which may be exploited by attackers to launch attacks. If PermitUserEnvironment is set to yes, attackers can modify SSH environment variables to evade the security mechanism or execute attack code. This configuration must be...

Linux: SSH PermitUserEnvironment

The PermitUserEnvironment option allows users to present environment options to the sshdaemon. Permitting users the ability to set environment variables through the SSH daemon could potentially allow users to bypass security controls e.g. setting an execution path that has sshexecuting trojan...