high8.1
CVE-2019-7639
An issue was discovered in gsi-openssh-server 7.9p1 on Fedora 29.
Impact
An issue was discovered in gsi-openssh-server 7.9p1 on Fedora 29. If PermitPAMUserChange is set to yes in the /etc/gsissh/sshd_config file, logins succeed with a valid username and an incorrect password, even though a failure entry is recorded in the /var/log/messages file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fedoraproject | Fedora | Versions 28, 29 |
| Gsi-Openssh Project | Gsi-Openssh | Version 7.9 |