CVE-2018-15919

Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or "oracle") as a vulnerability.'

• CWE-200
• CWE-200

• http://seclists.org/oss-sec/2018/q3/180Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/105163Third Party Advisory, VDB Entry
• https://security.netapp.com/advisory/ntap-20181221-0001/Third Party Advisory
• http://seclists.org/oss-sec/2018/q3/180Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/105163Third Party Advisory, VDB Entry
• https://security.netapp.com/advisory/ntap-20181221-0001/Third Party Advisory

Published

Aug 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-15910In Artifex Ghostscript before 9.24, attackers able to supply…
• CVE-2018-15911In Artifex Ghostscript 9.23 before 2018-08-24, attackers abl…
• CVE-2018-15912An issue was discovered in manjaro-update-system.sh in manja…
• CVE-2018-15913An issue was discovered in Cloudera Manager 5.x through 5.15…6.1
• CVE-2018-15917Persistent cross-site scripting (XSS) issues in Jorani 0.6.5…
• CVE-2018-15918An issue was discovered in Jorani 0.6.5. SQL Injection (erro…
• CVE-2018-15920Adobe Acrobat and Reader versions 2018.011.20063 and earlier…
• CVE-2018-15921Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-15922Adobe Acrobat and Reader versions 2018.011.20063 and earlier…
• CVE-2018-15923Adobe Acrobat and Reader versions 2018.011.20063 and earlier…
• CVE-2018-15924Adobe Acrobat and Reader versions 2018.011.20063 and earlier…
• CVE-2018-15925Adobe Acrobat and Reader versions 2018.011.20063 and earlier…