CVE-2021-36368 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2021-36368 Interim 1 8 2025-08-14T00:57:31Z current 2022-08-23T23:44:29Z 2025-08-14T00:57:31Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2021-36368 An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server, or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is "this is not an authentication bypass, since nothing is being bypassed. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Server Applications 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 openssh openssh-clients openssh-common openssh-fips openssh-helpers openssh-server openssh as a component of SUSE CaaS Platform 4.0 openssh-fips as a component of SUSE CaaS Platform 4.0 openssh-helpers as a component of SUSE CaaS Platform 4.0 openssh as a component of SUSE Enterprise Storage 6 openssh as a component of SUSE Enterprise Storage 7 openssh as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 openssh as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS openssh-fips as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS openssh-helpers as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS openssh as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS openssh-fips as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS openssh-helpers as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS openssh as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS openssh-fips as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS openssh-helpers as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS openssh as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS openssh-fips as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS openssh-helpers as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS openssh as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS openssh-fips as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS openssh-helpers as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS openssh as a component of SUSE Linux Enterprise Micro 5.1 openssh-clients as a component of SUSE Linux Enterprise Micro 5.1 openssh-common as a component of SUSE Linux Enterprise Micro 5.1 openssh-fips as a component of SUSE Linux Enterprise Micro 5.1 openssh-server as a component of SUSE Linux Enterprise Micro 5.1 openssh as a component of SUSE Linux Enterprise Micro 5.2 openssh-clients as a component of SUSE Linux Enterprise Micro 5.2 openssh-common as a component of SUSE Linux Enterprise Micro 5.2 openssh-fips as a component of SUSE Linux Enterprise Micro 5.2 openssh-server as a component of SUSE Linux Enterprise Micro 5.2 openssh as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 openssh-clients as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 openssh-common as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 openssh-fips as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 openssh-helpers as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 openssh-server as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 openssh as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 openssh-clients as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 openssh-common as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 openssh-fips as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 openssh-helpers as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 openssh-server as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 openssh-fips as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 openssh as a component of SUSE Linux Enterprise Module for Server Applications 15 SP3 openssh as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata openssh as a component of SUSE Linux Enterprise Server 12 SP2-BCL openssh-fips as a component of SUSE Linux Enterprise Server 12 SP2-BCL openssh-helpers as a component of SUSE Linux Enterprise Server 12 SP2-BCL openssh as a component of SUSE Linux Enterprise Server 12 SP3-BCL openssh-fips as a component of SUSE Linux Enterprise Server 12 SP3-BCL openssh-helpers as a component of SUSE Linux Enterprise Server 12 SP3-BCL openssh as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS openssh-fips as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS openssh-helpers as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS openssh as a component of SUSE Linux Enterprise Server 12 SP4-LTSS openssh-fips as a component of SUSE Linux Enterprise Server 12 SP4-LTSS openssh-helpers as a component of SUSE Linux Enterprise Server 12 SP4-LTSS openssh as a component of SUSE Linux Enterprise Server 12 SP5 openssh-fips as a component of SUSE Linux Enterprise Server 12 SP5 openssh-helpers as a component of SUSE Linux Enterprise Server 12 SP5 openssh as a component of SUSE Linux Enterprise Server 15 SP1-LTSS openssh-fips as a component of SUSE Linux Enterprise Server 15 SP1-LTSS openssh-helpers as a component of SUSE Linux Enterprise Server 15 SP1-LTSS openssh as a component of SUSE Linux Enterprise Server 15 SP2-LTSS openssh-fips as a component of SUSE Linux Enterprise Server 15 SP2-LTSS openssh-helpers as a component of SUSE Linux Enterprise Server 15 SP2-LTSS openssh as a component of SUSE Linux Enterprise Server 15-ESPOS openssh as a component of SUSE Linux Enterprise Server 15-LTSS openssh-fips as a component of SUSE Linux Enterprise Server 15-LTSS openssh-helpers as a component of SUSE Linux Enterprise Server 15-LTSS openssh as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 openssh as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 openssh as a component of SUSE Linux Enterprise Server Teradata 12 SP3 openssh as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS openssh as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 openssh-fips as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 openssh-helpers as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 openssh as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 openssh as a component of SUSE Linux Enterprise Server for SAP Applications 15 openssh-fips as a component of SUSE Linux Enterprise Server for SAP Applications 15 openssh-helpers as a component of SUSE Linux Enterprise Server for SAP Applications 15 openssh as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 openssh-fips as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 openssh-helpers as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 openssh as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 openssh-fips as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 openssh-helpers as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 openssh as a component of SUSE Manager Proxy 4.1 openssh as a component of SUSE Manager Retail Branch Server 4.1 openssh as a component of SUSE Manager Server 4.1 openssh as a component of SUSE OpenStack Cloud 9 openssh-fips as a component of SUSE OpenStack Cloud 9 openssh-helpers as a component of SUSE OpenStack Cloud 9 openssh as a component of SUSE OpenStack Cloud Crowbar 9 openssh-fips as a component of SUSE OpenStack Cloud Crowbar 9 openssh-helpers as a component of SUSE OpenStack Cloud Crowbar 9 An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server, or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is "this is not an authentication bypass, since nothing is being bypassed. CVE-2021-36368 SUSE CaaS Platform 4.0:openssh SUSE CaaS Platform 4.0:openssh-fips SUSE CaaS Platform 4.0:openssh-helpers SUSE Enterprise Storage 6:openssh SUSE Enterprise Storage 7:openssh SUSE Linux Enterprise High Performance Computing 12 SP5:openssh SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openssh SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openssh-fips SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:openssh-helpers SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openssh SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openssh-fips SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:openssh-helpers SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openssh SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openssh-fips SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:openssh-helpers SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openssh SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openssh-fips SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:openssh-helpers SUSE Linux Enterprise High Performance Computing 15-LTSS:openssh SUSE Linux Enterprise High Performance Computing 15-LTSS:openssh-fips SUSE Linux Enterprise High Performance Computing 15-LTSS:openssh-helpers SUSE Linux Enterprise Micro 5.1:openssh SUSE Linux Enterprise Micro 5.1:openssh-clients SUSE Linux Enterprise Micro 5.1:openssh-common SUSE Linux Enterprise Micro 5.1:openssh-fips SUSE Linux Enterprise Micro 5.1:openssh-server SUSE Linux Enterprise Micro 5.2:openssh SUSE Linux Enterprise Micro 5.2:openssh-clients SUSE Linux Enterprise Micro 5.2:openssh-common SUSE Linux Enterprise Micro 5.2:openssh-fips SUSE Linux Enterprise Micro 5.2:openssh-server SUSE Linux Enterprise Module for Basesystem 15 SP3:openssh SUSE Linux Enterprise Module for Basesystem 15 SP3:openssh-clients SUSE Linux Enterprise Module for Basesystem 15 SP3:openssh-common SUSE Linux Enterprise Module for Basesystem 15 SP3:openssh-fips SUSE Linux Enterprise Module for Basesystem 15 SP3:openssh-helpers SUSE Linux Enterprise Module for Basesystem 15 SP3:openssh-server SUSE Linux Enterprise Module for Basesystem 15 SP4:openssh SUSE Linux Enterprise Module for Basesystem 15 SP4:openssh-clients SUSE Linux Enterprise Module for Basesystem 15 SP4:openssh-common SUSE Linux Enterprise Module for Basesystem 15 SP4:openssh-fips SUSE Linux Enterprise Module for Basesystem 15 SP4:openssh-helpers SUSE Linux Enterprise Module for Basesystem 15 SP4:openssh-server SUSE Linux Enterprise Module for Server Applications 15 SP3:openssh SUSE Linux Enterprise Module for Server Applications 15 SP3:openssh-fips SUSE Linux Enterprise Server 11 SP3 for Teradata:openssh SUSE Linux Enterprise Server 12 SP2-BCL:openssh SUSE Linux Enterprise Server 12 SP2-BCL:openssh-fips SUSE Linux Enterprise Server 12 SP2-BCL:openssh-helpers SUSE Linux Enterprise Server 12 SP3-BCL:openssh SUSE Linux Enterprise Server 12 SP3-BCL:openssh-fips SUSE Linux Enterprise Server 12 SP3-BCL:openssh-helpers SUSE Linux Enterprise Server 12 SP4-ESPOS:openssh SUSE Linux Enterprise Server 12 SP4-ESPOS:openssh-fips SUSE Linux Enterprise Server 12 SP4-ESPOS:openssh-helpers SUSE Linux Enterprise Server 12 SP4-LTSS:openssh SUSE Linux Enterprise Server 12 SP4-LTSS:openssh-fips SUSE Linux Enterprise Server 12 SP4-LTSS:openssh-helpers SUSE Linux Enterprise Server 12 SP5:openssh SUSE Linux Enterprise Server 12 SP5:openssh-fips SUSE Linux Enterprise Server 12 SP5:openssh-helpers SUSE Linux Enterprise Server 15 SP1-LTSS:openssh SUSE Linux Enterprise Server 15 SP1-LTSS:openssh-fips SUSE Linux Enterprise Server 15 SP1-LTSS:openssh-helpers SUSE Linux Enterprise Server 15 SP2-LTSS:openssh SUSE Linux Enterprise Server 15 SP2-LTSS:openssh-fips SUSE Linux Enterprise Server 15 SP2-LTSS:openssh-helpers SUSE Linux Enterprise Server 15-ESPOS:openssh SUSE Linux Enterprise Server 15-LTSS:openssh SUSE Linux Enterprise Server 15-LTSS:openssh-fips SUSE Linux Enterprise Server 15-LTSS:openssh-helpers SUSE Linux Enterprise Server Business Critical Linux 15 SP1:openssh SUSE Linux Enterprise Server Business Critical Linux 15 SP2:openssh SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:openssh SUSE Linux Enterprise Server Teradata 12 SP3:openssh SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssh SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssh-fips SUSE Linux Enterprise Server for SAP Applications 12 SP4:openssh-helpers SUSE Linux Enterprise Server for SAP Applications 12 SP5:openssh SUSE Linux Enterprise Server for SAP Applications 15 SP1:openssh SUSE Linux Enterprise Server for SAP Applications 15 SP1:openssh-fips SUSE Linux Enterprise Server for SAP Applications 15 SP1:openssh-helpers SUSE Linux Enterprise Server for SAP Applications 15 SP2:openssh SUSE Linux Enterprise Server for SAP Applications 15 SP2:openssh-fips SUSE Linux Enterprise Server for SAP Applications 15 SP2:openssh-helpers SUSE Linux Enterprise Server for SAP Applications 15:openssh SUSE Linux Enterprise Server for SAP Applications 15:openssh-fips SUSE Linux Enterprise Server for SAP Applications 15:openssh-helpers SUSE Manager Proxy 4.1:openssh SUSE Manager Retail Branch Server 4.1:openssh SUSE Manager Server 4.1:openssh SUSE OpenStack Cloud 9:openssh SUSE OpenStack Cloud 9:openssh-fips SUSE OpenStack Cloud 9:openssh-helpers SUSE OpenStack Cloud Crowbar 9:openssh SUSE OpenStack Cloud Crowbar 9:openssh-fips SUSE OpenStack Cloud Crowbar 9:openssh-helpers not set 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N 0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N