{"cvss":6.8,"datePublished":"2020-07-19T00:00:00Z","dateUpdated":"2020-07-19T00:00:00Z","description":"An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.","dueDate":"","id":"CVE-2019-6109","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"OpenSSH","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"MEDIUM","source":"vulncheck_kev","title":"OpenBSD OpenSSH Improper Encoding or Escaping of Output","vendor":"OpenBSD"}