CVE-2018-15919 Information disclosure in n/a

Medium 5.3 Published 28 Aug 2018 Updated 18 Dec 2025

Remote attackers can enumerate valid usernames on OpenSSH servers when GSS2 authentication is enabled, revealing user existence.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2018-15919?

CVE-2018-15919 is a medium-severity vulnerability in Netapp Cloud Backup, published on 28 Aug 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or "oracle") as a vulnerability.'

Weakness: CWE-200

Which versions are affected by CVE-2018-15919?

It affects 6 products.

Products include Netapp Cloud Backup, Netapp Cn1610 Firmware, Netapp Data Ontap Edge, Netapp Ontap Select Deploy, Netapp Steelstore, OpenSSH.

How do I fix CVE-2018-15919?

No fix published yet.

Is CVE-2018-15919 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-15919 exists.

All Netapp Cloud Backup vulnerabilities

Sources

Also known as DEBIAN-CVE-2018-15919, GHSA-rj3q-q9f3-gr2v, ROOT-OS-DEBIAN-12-CVE-2018-15919, UBUNTU-CVE-2018-15919.