| Package | Affected versions | Patched versions |
|---|---|---|
| oncommand unified manager | ≥ 9.4 | |
| storage replication adapter | ≥ 7.2 | |
| vasa provider | ≥ 7.2 | |
| virtual storage console | ≥ 7.2 | |
| openssh | ≤ 7.7 | |
| sun zfs storage appliance kit | = 8.8.6 |
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free