Loading HuntDB...

Username enumeration via Openssh 7.6

Medium
K
Kubernetes
Submitted None

Vulnerability Details

Technical details and impact analysis

Username enumeration I have found a vulnerability in your site that allows me to verify if an user exits in the ssh due to the use of OpenSSH 7.6p1. PoC 1 Download and compile the given exploit file 2 open a terminal and run the exploit I have attached a Screenshot if detailed PoC is needed please inform me. ## Impact The attacker can get a list of users available in the ssh.

Report Details

Additional information and metadata

State

Closed

Substate

Informative

Submitted