The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.
El lado del cliente en OpenSSH versiones 5.7 hasta 8.4, presenta una Discrepancia Observable que conlleva a una filtración de información en la negociación del algoritmo. Esto permite a atacantes de tipo man-in-the-middle apuntar a unos intentos iniciales de conexión (donde ninguna clave de host para el servidor ha sido almacenada en caché por parte del cliente) NOTA: algunos informes afirman que las versiones 8.5 y 8.6 también están afectadas.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | HIGH |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | NONE |
| Availability Impact | NONE |
AV:N/AC:M/Au:N/C:P/I:N/A:N
| Access Vector | NETWORK |
|---|---|
| Access Complexity | MEDIUM |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | NONE |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-203
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-203
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| openbsd | openssh | * | <built-in method update of dict object at 0x7fd3855d9800> | Application |
| openbsd | openssh | 8.4 | <built-in method update of dict object at 0x7fd36945d200> | Application |
| openbsd | openssh | 8.5 | <built-in method update of dict object at 0x7fd36945f880> | Application |
| openbsd | openssh | 8.6 | <built-in method update of dict object at 0x7fd3401d2ec0> | Application |
| netapp | aff_a700s_firmware | - | <built-in method update of dict object at 0x7fd36945eac0> | Operating System |
| netapp | active_iq_unified_manager | * | <built-in method update of dict object at 0x7fd36945d740> | Application |
| netapp | hci_management_node | - | <built-in method update of dict object at 0x7fd36945dec0> | Application |
| netapp | ontap_select_deploy_administration_utility | - | <built-in method update of dict object at 0x7fd3401d0d00> | Application |
| netapp | solidfire | - | <built-in method update of dict object at 0x7fd3401d1880> | Application |
| netapp | steelstore_cloud_integrated_storage | - | <built-in method update of dict object at 0x7fd36945d180> | Application |
| netapp | hci_compute_node | - | <built-in method update of dict object at 0x7fd36945e440> | Hardware |
| netapp | hci_storage_node | - | <built-in method update of dict object at 0x7fd3401d3140> | Hardware |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:openbsd:openssh:8.4:-:*:*:*:*:*:* |
| Yes | cpe:2.3:a:openbsd:openssh:8.5:-:*:*:*:*:*:* |
| Yes | cpe:2.3:a:openbsd:openssh:8.6:-:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:netapp:aff_a700s_firmware:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| No | cpe:2.3:h:netapp:aff_a700s:-:*:*:*:*:*:*:* |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:vmware_vsphere:*:* |
| Yes | cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:a:netapp:steelstore_cloud_integrated_storage:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:* |
| Yes | cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:* |