CVE-2019-6110 Information disclosure in n/a
A malicious SSH server can manipulate client output using ANSI codes to hide transferred files, potentially misleading users about data exfiltration.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2019-6110?
CVE-2019-6110 is a medium-severity vulnerability in Netapp Element Software, published on 31 Jan 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
Weakness: CWE-838
Which versions are affected by CVE-2019-6110?
It affects 7 products.
Products include Netapp Element Software, Netapp Ontap Select Deploy, Netapp Storage Automation Store, OpenSSH, Siemens Scalance X204rna Eec Firmware, Siemens Scalance X204rna Firmware and 1 more.
How do I fix CVE-2019-6110?
Upgrade to a fixed version.
Is CVE-2019-6110 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2019-6110 exists.
Public exploit code: 2 Exploit-DB entries.
Sources
Also known as DEBIAN-CVE-2019-6110, GHSA-mv2j-4mm8-9xgv, UBUNTU-CVE-2019-6110.