Log in Start free

Vulnerability · Published Mar 12, 2022 · Assigned by mitre

CVE-2021-36368

Low 3.7

In plain English

A low-severity improper authentication in the openssh package (Alpine). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.7Low
Exploit odds (30 days)1.7%top 23.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server, or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is "this is not an authentication bypass, since nothing is being bypassed.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20openssh8.9_p1-r0ALPINE-CVE-2021-36368
Alpine:v3.21openssh8.9_p1-r0ALPINE-CVE-2021-36368
Alpine:v3.22openssh8.9_p1-r0ALPINE-CVE-2021-36368
Alpine:v3.23openssh8.9_p1-r0ALPINE-CVE-2021-36368
Alpine:v3.24openssh8.9_p1-r0ALPINE-CVE-2021-36368
Debian:12openssh1:8.9p1-1DEBIAN-CVE-2021-36368
Debian:13openssh1:8.9p1-1DEBIAN-CVE-2021-36368
Debian:14openssh1:8.9p1-1DEBIAN-CVE-2021-36368

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

References