Username enumeration via Openssh 7.6
Medium
K
Kubernetes
Submitted None
Actions:
Reported by
dre4dpir4terob3rts
Vulnerability Details
Technical details and impact analysis
Username enumeration
I have found a vulnerability in your site that allows me to verify if an user exits in the ssh due to the use of OpenSSH 7.6p1.
PoC
1 Download and compile the given exploit file
2 open a terminal and run the exploit
I have attached a Screenshot if detailed PoC is needed please inform me.
## Impact
The attacker can get a list of users available in the ssh.
Report Details
Additional information and metadata
State
Closed
Substate
Informative