CVE-2019-1842

A vulnerability in the Secure Shell (SSH) authentication function of Cisco IOS XR Software could allow an authenticated, remote attacker to successfully log in to an affected device using two distinct usernames. The vulnerability is due to a logic error that may occur when certain sequences of actions are processed during an SSH login event on the affected device. An attacker could exploit this vulnerability by initiating an SSH session to the device with a specific sequence that presents the two usernames. A successful exploit could result in logging data misrepresentation, user enumeration, or, in certain circumstances, a command authorization bypass. See the Details section for more information.

• CWE-285
• CWE-287

• http://www.securityfocus.com/bid/108687Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-iosxr-sshVendor Advisory
• http://www.securityfocus.com/bid/108687Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190605-iosxr-sshVendor Advisory

Published

Jun 5, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18414Sourcecodester Restaurant Management System 1.0 is affected …8.8
• CVE-2019-18415Sourcecodester Restaurant Management System 1.0 allows XSS v…6.1
• CVE-2019-18416Sourcecodester Restaurant Management System 1.0 allows XSS v…6.1
• CVE-2019-18417Sourcecodester Restaurant Management System 1.0 allows an au…8.8
• CVE-2019-18418clonos.php in ClonOS WEB control panel 19.09 allows remote a…9.8
• CVE-2019-18419A cross-site scripting (XSS) vulnerability in index.php in C…6.1
• CVE-2019-18420An issue was discovered in Xen through 4.12.x allowing x86 P…6.5
• CVE-2019-18421An issue was discovered in Xen through 4.12.x allowing x86 P…7.5
• CVE-2019-18422An issue was discovered in Xen through 4.12.x allowing ARM g…8.8
• CVE-2019-18423An issue was discovered in Xen through 4.12.x allowing ARM g…8.8
• CVE-2019-18424An issue was discovered in Xen through 4.12.x allowing attac…6.8
• CVE-2019-18425An issue was discovered in Xen through 4.12.x allowing 32-bi…9.8