A vulnerability in the Secure Shell (SSH) authentication function of Cisco IOS XR Software could allow an authenticated, remote attacker to successfully log in to an affected device using two distinct usernames. The vulnerability is due to a logic error that may occur when certain sequences of actions are processed during an SSH login event on the affected device. An attacker could exploit this vulnerability by initiating an SSH session to the device with a specific sequence that presents the two usernames. A successful exploit could result in logging data misrepresentation, user enumeration, or, in certain circumstances, a command authorization bypass. See the Details section for more information.
History

Thu, 21 Nov 2024 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2019-06-05T16:20:15.262993Z

Updated: 2024-11-21T19:23:06.717Z

Reserved: 2018-12-06T00:00:00

Link: CVE-2019-1842

cve-icon Vulnrichment

Updated: 2024-08-04T18:28:42.866Z

cve-icon NVD

Status : Modified

Published: 2019-06-05T17:29:00.430

Modified: 2024-11-21T04:37:30.750

Link: CVE-2019-1842

cve-icon Redhat

No data.