CVE-2007-2768

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-05-21 · updated 2026-06-16
Weakness: CWE-200

Description

OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.

Affected products

NetApp Hci Management Node: all versions
NetApp Hci Storage Node: all versions
NetApp Solidfire: all versions
NetApp Steelstore Cloud Integrated Storage: all versions
OpenSSH: all versions

References

http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0635.html
http://www.osvdb.org/34601
https://security.netapp.com/advisory/ntap-20191107-0002/
http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0635.html
http://www.osvdb.org/34601
https://security.netapp.com/advisory/ntap-20191107-0002/

Get alerted when CVE-2007-2768 or the next vulnerability affects your stack