Vulnerabilities > CVE-2016-20012

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

openbsd

netapp

NVD

Published: 2021-09-15

Updated: 2024-08-06

Summary

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

Vulnerable Configurations

Part	Description	Count
Application	Openbsd Openbsd Openssh - Openbsd Openssh 1.2 Openbsd Openssh 1.2.1 Openbsd Openssh 1.2.2 Openbsd Openssh 1.2.3 Openbsd Openssh 1.2.27 Openbsd Openssh 1.3 Openbsd Openssh 1.5 Openbsd Openssh 1.5.7 Openbsd Openssh 1.5.8 Openbsd Openssh 2 Openbsd Openssh 2.1 Openbsd Openssh 2.1.0 Openbsd Openssh 2.1.1 Openbsd Openssh 2.2 Openbsd Openssh 2.2.0 Openbsd Openssh 2.3 Openbsd Openssh 2.3.0 Openbsd Openssh 2.3.1 Openbsd Openssh 2.5 Openbsd Openssh 2.5.1 Openbsd Openssh 2.5.2 Openbsd Openssh 2.9 Openbsd Openssh 2.9.9 Openbsd Openssh 2.9.9P2 Openbsd Openssh 2.9P1 Openbsd Openssh 2.9P2 Openbsd Openssh 3.0 Openbsd Openssh 3.0.1 Openbsd Openssh 3.0.1P1 Openbsd Openssh 3.0.2 Openbsd Openssh 3.0.2P1 Openbsd Openssh 3.0P1 Openbsd Openssh 3.1 Openbsd Openssh 3.1P1 Openbsd Openssh 3.2 Openbsd Openssh 3.2.2 Openbsd Openssh 3.2.2P1 Openbsd Openssh 3.2.3 Openbsd Openssh 3.2.3P1 Openbsd Openssh 3.3 Openbsd Openssh 3.3P1 Openbsd Openssh 3.4 Openbsd Openssh 3.4P1 Openbsd Openssh 3.5 Openbsd Openssh 3.5P1 Openbsd Openssh 3.6 Openbsd Openssh 3.6.1 Openbsd Openssh 3.6.1P1 Openbsd Openssh 3.6.1P2 Openbsd Openssh 3.7 Openbsd Openssh 3.7.1 Openbsd Openssh 3.7.1P1 Openbsd Openssh 3.7.1P2 Openbsd Openssh 3.8 Openbsd Openssh 3.8.1 Openbsd Openssh 3.8.1P1 Openbsd Openssh 3.9 Openbsd Openssh 3.9.1 Openbsd Openssh 3.9.1P1 Openbsd Openssh 4.0 Openbsd Openssh 4.0P1 Openbsd Openssh 4.1 Openbsd Openssh 4.1P1 Openbsd Openssh 4.2 Openbsd Openssh 4.2P1 Openbsd Openssh 4.3 Openbsd Openssh 4.3P1 Openbsd Openssh 4.3P2 Openbsd Openssh 4.4 Openbsd Openssh 4.4P1 Openbsd Openssh 4.5 Openbsd Openssh 4.6 Openbsd Openssh 4.7 Openbsd Openssh 4.7P1 Openbsd Openssh 4.8 Openbsd Openssh 4.9 Openbsd Openssh 5.0 Openbsd Openssh 5.1 Openbsd Openssh 5.2 Openbsd Openssh 5.3 Openbsd Openssh 5.4 Openbsd Openssh 5.5 Openbsd Openssh 5.6 Openbsd Openssh 5.7 Openbsd Openssh 5.8 Openbsd Openssh 5.8P2 Openbsd Openssh 5.9 Openbsd Openssh 6.0 Openbsd Openssh 6.1 Openbsd Openssh 6.2 Openbsd Openssh 6.3 Openbsd Openssh 6.4 Openbsd Openssh 6.5 Openbsd Openssh 6.6 Openbsd Openssh 6.7 Openbsd Openssh 6.8 Openbsd Openssh 6.9 Openbsd Openssh 7.0 Openbsd Openssh 7.1 Openbsd Openssh 7.2 Openbsd Openssh 7.3 Openbsd Openssh 7.4 Openbsd Openssh 7.5 Openbsd Openssh 7.6 Openbsd Openssh 7.7 Openbsd Openssh 7.8 Openbsd Openssh 7.9 Openbsd Openssh 8.0 Openbsd Openssh 8.1 Openbsd Openssh 8.2 Openbsd Openssh 8.3 Openbsd Openssh 8.4 Openbsd Openssh 8.5 Openbsd Openssh 8.6 Openbsd Openssh 8.7	259
Application	Netapp Netapp Ontap Select Deploy Administration Utility - Netapp Clustered Data Ontap - Netapp Solidfire - Netapp HCI Management Node -	4

Vulnerabilities > CVE-2016-20012 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2016-20012"}]}

Summary

Vulnerable Configurations

References

Vulnerabilities > CVE-2016-20012