According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - ** DISPUTED ** An issue was discovered in OpenSSH before 8.9. If a client is using public-key     authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified     the server to support the None authentication option, then the user cannot determine whether FIDO     authentication is going to confirm that the user wishes to connect to that server, or that the user wishes     to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is     'this is not an authentication bypass, since nothing is being bypassed.' (CVE-2021-36368)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - ** DISPUTED ** An issue was discovered in OpenSSH before 8.9. If a client is using public-key     authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified     the server to support the None authentication option, then the user cannot determine whether FIDO     authentication is going to confirm that the user wishes to connect to that server, or that the user wishes     to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is     'this is not an authentication bypass, since nothing is being bypassed.' (CVE-2021-36368)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its banner, the version of OpenSSH running on the remote host is potentially affected by multiple vulnerabilities.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

バナーによると、リモートホストで実行されている OpenSSH のバージョンは、複数の脆弱性の影響を受ける可能性があります。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

根據其標題，遠端主機上執行的 OpenSSH 版本受多個弱點影響。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent     forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the     None authentication option, then the user cannot determine whether FIDO authentication is going to confirm     that the user wishes to connect to that server, or that the user wishes to allow that server to connect to     a different server on the user's behalf. NOTE: the vendor's position is 'this is not an authentication     bypass, since nothing is being bypassed.(CVE-2021-36368)

Tenable has extracted the preceding description block directly from the EulerOS openssh security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

根据其标题，远程主机上运行的 OpenSSH 版本受到多个漏洞影响。

请注意，Nessus 尚未测试这些问题，而是只依靠应用程序自我报告的版本号来判断。

ID	名前	製品	ファミリー	公開日	更新日	深刻度
162897	EulerOS 2.0 SP9 : openssh (EulerOS-SA-2022-1976)	Nessus	Huawei Local Security Checks	2022/7/8	2022/7/8	low
163551	EulerOS 2.0 SP10 : openssh (EulerOS-SA-2022-2142)	Nessus	Huawei Local Security Checks	2022/7/29	2022/7/29	low
165397	EulerOS Virtualization 2.9.1 : openssh (EulerOS-SA-2022-2359)	Nessus	Huawei Local Security Checks	2022/9/24	2022/9/24	low
159492	OpenSSH PCI Disputed Vulnerabilities.	Nessus	Misc.	2022/4/4	2024/3/27	high
159492	OpenSSH PCI の異論のある脆弱性。	Nessus	Misc.	2022/4/4	2024/3/27	high
159492	OpenSSH PCI 爭議性弱點。	Nessus	Misc.	2022/4/4	2024/3/27	high
163211	EulerOS Virtualization 2.10.0 : openssh (EulerOS-SA-2022-2097)	Nessus	Huawei Local Security Checks	2022/7/15	2022/7/15	low
163569	EulerOS 2.0 SP10 : openssh (EulerOS-SA-2022-2167)	Nessus	Huawei Local Security Checks	2022/7/29	2022/7/29	low
205945	EulerOS 2.0 SP12 : openssh (EulerOS-SA-2024-2246)	Nessus	Huawei Local Security Checks	2024/8/20	2024/8/20	low
159492	OpenSSH PCI 争议性漏洞。	Nessus	Misc.	2022/4/4	2024/3/27	high
165368	EulerOS Virtualization 2.9.0 : openssh (EulerOS-SA-2022-2395)	Nessus	Huawei Local Security Checks	2022/9/23	2022/9/23	low
163124	EulerOS Virtualization 2.10.1 : openssh (EulerOS-SA-2022-2117)	Nessus	Huawei Local Security Checks	2022/7/14	2022/7/14	low
162909	EulerOS 2.0 SP9 : openssh (EulerOS-SA-2022-2006)	Nessus	Huawei Local Security Checks	2022/7/8	2022/7/8	low
205932	EulerOS 2.0 SP12 : openssh (EulerOS-SA-2024-2222)	Nessus	Huawei Local Security Checks	2024/8/20	2024/8/20	low

検出

プラグインの検索

low

low

low

high

high

high

low

low

low

high

low

low

low

low