CVE-1999-1231
MEDIUM—CVSS v3
5.0CVSS v2
0.76%
EPSS (exploit probability)
—CWE
Description
ssh 2.0.12, and possibly other versions, allows valid user names to attempt to enter the correct password multiple times, but only prompts an invalid user name for a password once, which allows remote attackers to determine user account names on the server.
Affected routers (0)
No routers currently mapped to this CVE in our database.