CVE-2026-48859

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-48859", "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "state": "PUBLISHED", "assignerShortName": "EEF", "dateReserved": "2026-05-25T20:44:10.697Z", "datePublished": "2026-06-10T14:35:43.553Z", "dateUpdated": "2026-11-11T13:57:17.599Z"}, "containers": {"cna": {"affected": [{"cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["ssh_auth", "ssh_options"], "packageName": "otp", "packageURL": "pkg:software-id/erlang.org/otp", "product": "OTP", "programFiles": ["lib/ssh/src/ssh_auth.erl", "lib/ssh/src/ssh_options.erl"], "programRoutines": [{"name": "ssh_auth:check_password/3"}, {"name": "ssh_options:get_password_option/2"}], "vendor": "Erlang", "versions": [{"lessThan": "29.0.2", "status": "affected", "version": "29.0", "versionType": "otp"}]}, {"cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["ssh_auth", "ssh_options"], "packageName": "ssh", "packageURL": "pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git", "product": "OTP", "programFiles": ["src/ssh_auth.erl", "src/ssh_options.erl"], "programRoutines": [{"name": "ssh_auth:check_password/3"}, {"name": "ssh_options:get_password_option/2"}], "repo": "https://github.com/erlang/otp", "vendor": "Erlang", "versions": [{"lessThan": "6.0.1", "status": "affected", "version": "6.0", "versionType": "otp"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["ssh_auth", "ssh_options"], "packageName": "erlang/otp", "packageURL": "pkg:github/erlang/otp", "product": "OTP", "programFiles": ["lib/ssh/src/ssh_auth.erl", "lib/ssh/src/ssh_options.erl"], "programRoutines": [{"name": "ssh_auth:check_password/3"}, {"name": "ssh_options:get_password_option/2"}], "repo": "https://github.com/erlang/otp", "vendor": "Erlang", "versions": [{"lessThan": "c342092ef4b369bb409d5b71ac8fd83bab74aedf", "status": "affected", "version": "032d1bc9491a3975c68faf9bc7776115d6ae3005", "versionType": "git"}]}], "configurations": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>The SSH daemon must be configured with the <code>user_passwords</code> or <code>password</code> option for password authentication. Systems using the <code>pwdfun</code> option instead are not affected.</p>"}, {"base64": false, "type": "text/markdown", "value": "The SSH daemon must be configured with the `user_passwords` or `password` option for password authentication. Systems using the `pwdfun` option instead are not affected."}], "value": "The SSH daemon must be configured with the user_passwords or password option for password authentication. Systems using the pwdfun option instead are not affected."}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "versionEndExcluding": "29.0.2", "versionStartIncluding": "29.0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "AND"}], "credits": [{"lang": "en", "type": "finder", "value": "Zhang Delong"}, {"lang": "en", "type": "remediation developer", "value": "Jakub Witczak"}, {"lang": "en", "type": "remediation reviewer", "value": "Ingela Anderton Andin"}, {"lang": "en", "type": "remediation reviewer", "value": "Micha\u0142 W\u0105sowski"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.</p>\n<p>When the SSH daemon is configured with the <code>user_passwords</code> or <code>password</code> option, <code>ssh_auth:check_password/3</code> performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the <code>ssh_options:get_password_option/2</code> path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.</p>\n<p>The <code>user_passwords</code> and <code>password</code> options are documented as intended for test purposes; the recommended alternative is <code>pwdfun</code>, which is not affected by this vulnerability.</p>\n<p>This vulnerability is associated with program files <code>lib/ssh/src/ssh_auth.erl</code> and <code>lib/ssh/src/ssh_options.erl</code>.</p>\n<p>This issue affects OTP from OTP&nbsp;29.0 before OTP&nbsp;29.0.2, corresponding to ssh from 6.0 before 6.0.1.</p>"}, {"base64": false, "type": "text/markdown", "value": "Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.\n\nWhen the SSH daemon is configured with the `user_passwords` or `password` option, `ssh_auth:check_password/3` performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the `ssh_options:get_password_option/2` path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.\n\nThe `user_passwords` and `password` options are documented as intended for test purposes; the recommended alternative is `pwdfun`, which is not affected by this vulnerability.\n\nThis vulnerability is associated with program files `lib/ssh/src/ssh_auth.erl` and `lib/ssh/src/ssh_options.erl`.\n\nThis issue affects OTP from OTP\u00a029.0 before OTP\u00a029.0.2, corresponding to ssh from 6.0 before 6.0.1."}], "value": "Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.\n\nWhen the SSH daemon is configured with the user_passwords or password option, ssh_auth:check_password/3 performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the ssh_options:get_password_option/2 path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.\n\nThe user_passwords and password options are documented as intended for test purposes; the recommended alternative is pwdfun, which is not affected by this vulnerability.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_auth.erl and lib/ssh/src/ssh_options.erl.\n\nThis issue affects OTP from OTP\u00a029.0 before OTP\u00a029.0.2, corresponding to ssh from 6.0 before 6.0.1."}], "impacts": [{"capecId": "CAPEC-116", "descriptions": [{"lang": "en", "value": "CAPEC-116 Excavation"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "baseScore": 6.3, "baseSeverity": "MEDIUM", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-208", "description": "CWE-208 Observable Timing Discrepancy", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", "dateUpdated": "2026-11-11T13:57:17.599Z"}, "references": [{"tags": ["vendor-advisory", "related"], "url": "https://github.com/erlang/otp/security/advisories/GHSA-3w6p-vwhf-wvp4"}, {"name": "EEF CNA record for CVE-2026-48859", "tags": ["related"], "url": "https://cna.erlef.org/cves/CVE-2026-48859.html"}, {"name": "OSV record EEF-CVE-2026-48859", "tags": ["related"], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-48859"}, {"name": "Erlang/OTP version ordering", "tags": ["x_version-scheme"], "url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"}, {"name": "Introducing commit 032d1bc in erlang/otp", "tags": ["related"], "url": "https://github.com/erlang/otp/commit/032d1bc9491a3975c68faf9bc7776115d6ae3005"}, {"name": "Fix commit c342092 in erlang/otp", "tags": ["patch"], "url": "https://github.com/erlang/otp/commit/c342092ef4b369bb409d5b71ac8fd83bab74aedf"}], "source": {"discovery": "EXTERNAL"}, "title": "SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<ul>\n<li>Use the <code>pwdfun</code> option instead of <code>user_passwords</code> for password authentication. The <code>pwdfun</code> callback gives full control over timing behavior and is not affected by this vulnerability. Implementations should take care to execute in approximately constant time regardless of username validity.</li>\n<li>Restrict SSH port access to trusted networks only via firewall rules, reducing the set of potential attackers who can perform timing measurements.</li>\n</ul>"}, {"base64": false, "type": "text/markdown", "value": "* Use the `pwdfun` option instead of `user_passwords` for password authentication. The `pwdfun` callback gives full control over timing behavior and is not affected by this vulnerability. Implementations should take care to execute in approximately constant time regardless of username validity.\n* Restrict SSH port access to trusted networks only via firewall rules, reducing the set of potential attackers who can perform timing measurements."}], "value": "* Use the pwdfun option instead of user_passwords for password authentication. The pwdfun callback gives full control over timing behavior and is not affected by this vulnerability. Implementations should take care to execute in approximately constant time regardless of username validity.\n* Restrict SSH port access to trusted networks only via firewall rules, reducing the set of potential attackers who can perform timing measurements."}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-10T16:19:16.914933Z", "id": "CVE-2026-48859", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-10T16:19:43.145Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-48859", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-10T16:19:16.914933Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-10T16:19:38.063Z"}}], "cna": {"title": "SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Zhang Delong"}, {"lang": "en", "type": "remediation developer", "value": "Jakub Witczak"}, {"lang": "en", "type": "remediation reviewer", "value": "Ingela Anderton Andin"}, {"lang": "en", "type": "remediation reviewer", "value": "Micha\u0142 W\u0105sowski"}], "impacts": [{"capecId": "CAPEC-116", "descriptions": [{"lang": "en", "value": "CAPEC-116 Excavation"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "vendor": "Erlang", "modules": ["ssh_auth", "ssh_options"], "product": "OTP", "versions": [{"status": "affected", "version": "29.0", "lessThan": "29.0.2", "versionType": "otp"}], "packageURL": "pkg:software-id/erlang.org/otp", "packageName": "otp", "programFiles": ["lib/ssh/src/ssh_auth.erl", "lib/ssh/src/ssh_options.erl"], "defaultStatus": "unaffected", "programRoutines": [{"name": "ssh_auth:check_password/3"}, {"name": "ssh_options:get_password_option/2"}]}, {"cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "repo": "https://github.com/erlang/otp", "vendor": "Erlang", "modules": ["ssh_auth", "ssh_options"], "product": "OTP", "versions": [{"status": "affected", "version": "6.0", "lessThan": "6.0.1", "versionType": "otp"}], "packageURL": "pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git", "packageName": "ssh", "programFiles": ["src/ssh_auth.erl", "src/ssh_options.erl"], "defaultStatus": "unaffected", "programRoutines": [{"name": "ssh_auth:check_password/3"}, {"name": "ssh_options:get_password_option/2"}]}, {"cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "repo": "https://github.com/erlang/otp", "vendor": "Erlang", "modules": ["ssh_auth", "ssh_options"], "product": "OTP", "versions": [{"status": "affected", "version": "032d1bc9491a3975c68faf9bc7776115d6ae3005", "lessThan": "c342092ef4b369bb409d5b71ac8fd83bab74aedf", "versionType": "git"}], "packageURL": "pkg:github/erlang/otp", "packageName": "erlang/otp", "programFiles": ["lib/ssh/src/ssh_auth.erl", "lib/ssh/src/ssh_options.erl"], "collectionURL": "https://github.com", "defaultStatus": "unaffected", "programRoutines": [{"name": "ssh_auth:check_password/3"}, {"name": "ssh_options:get_password_option/2"}]}], "references": [{"url": "https://github.com/erlang/otp/security/advisories/GHSA-3w6p-vwhf-wvp4", "tags": ["vendor-advisory", "related"]}, {"url": "https://cna.erlef.org/cves/CVE-2026-48859.html", "name": "EEF CNA record for CVE-2026-48859", "tags": ["related"]}, {"url": "https://osv.dev/vulnerability/EEF-CVE-2026-48859", "name": "OSV record EEF-CVE-2026-48859", "tags": ["related"]}, {"url": "https://www.erlang.org/doc/system/versions.html#order-of-versions", "name": "Erlang/OTP version ordering", "tags": ["x_version-scheme"]}, {"url": "https://github.com/erlang/otp/commit/032d1bc9491a3975c68faf9bc7776115d6ae3005", "name": "Introducing commit 032d1bc in erlang/otp", "tags": ["related"]}, {"url": "https://github.com/erlang/otp/commit/c342092ef4b369bb409d5b71ac8fd83bab74aedf", "name": "Fix commit c342092 in erlang/otp", "tags": ["patch"]}], "workarounds": [{"lang": "en", "value": "* Use the pwdfun option instead of user_passwords for password authentication. The pwdfun callback gives full control over timing behavior and is not affected by this vulnerability. Implementations should take care to execute in approximately constant time regardless of username validity.\n* Restrict SSH port access to trusted networks only via firewall rules, reducing the set of potential attackers who can perform timing measurements.", "supportingMedia": [{"type": "text/html", "value": "<ul>\n<li>Use the <code>pwdfun</code> option instead of <code>user_passwords</code> for password authentication. The <code>pwdfun</code> callback gives full control over timing behavior and is not affected by this vulnerability. Implementations should take care to execute in approximately constant time regardless of username validity.</li>\n<li>Restrict SSH port access to trusted networks only via firewall rules, reducing the set of potential attackers who can perform timing measurements.</li>\n</ul>", "base64": false}, {"type": "text/markdown", "value": "* Use the `pwdfun` option instead of `user_passwords` for password authentication. The `pwdfun` callback gives full control over timing behavior and is not affected by this vulnerability. Implementations should take care to execute in approximately constant time regardless of username validity.\n* Restrict SSH port access to trusted networks only via firewall rules, reducing the set of potential attackers who can perform timing measurements.", "base64": false}]}], "descriptions": [{"lang": "en", "value": "Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.\n\nWhen the SSH daemon is configured with the user_passwords or password option, ssh_auth:check_password/3 performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the ssh_options:get_password_option/2 path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.\n\nThe user_passwords and password options are documented as intended for test purposes; the recommended alternative is pwdfun, which is not affected by this vulnerability.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_auth.erl and lib/ssh/src/ssh_options.erl.\n\nThis issue affects OTP from OTP\u00a029.0 before OTP\u00a029.0.2, corresponding to ssh from 6.0 before 6.0.1.", "supportingMedia": [{"type": "text/html", "value": "<p>Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.</p>\n<p>When the SSH daemon is configured with the <code>user_passwords</code> or <code>password</code> option, <code>ssh_auth:check_password/3</code> performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the <code>ssh_options:get_password_option/2</code> path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.</p>\n<p>The <code>user_passwords</code> and <code>password</code> options are documented as intended for test purposes; the recommended alternative is <code>pwdfun</code>, which is not affected by this vulnerability.</p>\n<p>This vulnerability is associated with program files <code>lib/ssh/src/ssh_auth.erl</code> and <code>lib/ssh/src/ssh_options.erl</code>.</p>\n<p>This issue affects OTP from OTP&nbsp;29.0 before OTP&nbsp;29.0.2, corresponding to ssh from 6.0 before 6.0.1.</p>", "base64": false}, {"type": "text/markdown", "value": "Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.\n\nWhen the SSH daemon is configured with the `user_passwords` or `password` option, `ssh_auth:check_password/3` performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the `ssh_options:get_password_option/2` path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.\n\nThe `user_passwords` and `password` options are documented as intended for test purposes; the recommended alternative is `pwdfun`, which is not affected by this vulnerability.\n\nThis vulnerability is associated with program files `lib/ssh/src/ssh_auth.erl` and `lib/ssh/src/ssh_options.erl`.\n\nThis issue affects OTP from OTP\u00a029.0 before OTP\u00a029.0.2, corresponding to ssh from 6.0 before 6.0.1.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-208", "description": "CWE-208 Observable Timing Discrepancy"}]}], "configurations": [{"lang": "en", "value": "The SSH daemon must be configured with the user_passwords or password option for password authentication. Systems using the pwdfun option instead are not affected.", "supportingMedia": [{"type": "text/html", "value": "<p>The SSH daemon must be configured with the <code>user_passwords</code> or <code>password</code> option for password authentication. Systems using the <code>pwdfun</code> option instead are not affected.</p>", "base64": false}, {"type": "text/markdown", "value": "The SSH daemon must be configured with the `user_passwords` or `password` option for password authentication. Systems using the `pwdfun` option instead are not affected.", "base64": false}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "29.0.2", "versionStartIncluding": "29.0"}], "operator": "OR"}], "operator": "AND"}], "providerMetadata": {"orgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "shortName": "EEF", "dateUpdated": "2026-11-11T13:57:17.599Z"}}}, "cveMetadata": {"cveId": "CVE-2026-48859", "state": "PUBLISHED", "dateUpdated": "2026-11-11T13:57:17.599Z", "dateReserved": "2026-05-25T20:44:10.697Z", "assignerOrgId": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "datePublished": "2026-06-10T14:35:43.553Z", "assignerShortName": "EEF"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["ssh_auth", "ssh_options"], "packageName": "otp", "packageURL": "pkg:software-id/erlang.org/otp", "product": "OTP", "programFiles": ["lib/ssh/src/ssh_auth.erl", "lib/ssh/src/ssh_options.erl"], "programRoutines": [{"name": "ssh_auth:check_password/3"}, {"name": "ssh_options:get_password_option/2"}], "vendor": "Erlang", "versions": [{"lessThan": "29.0.2", "status": "affected", "version": "29.0", "versionType": "otp"}]}, {"cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["ssh_auth", "ssh_options"], "packageName": "ssh", "packageURL": "pkg:otp/ssh?repository_url=https:%2F%2Fgithub.com%2Ferlang%2Fotp&vcs_url=git%2Bhttps:%2F%2Fgithub.com%2Ferlang%2Fotp.git", "product": "OTP", "programFiles": ["src/ssh_auth.erl", "src/ssh_options.erl"], "programRoutines": [{"name": "ssh_auth:check_password/3"}, {"name": "ssh_options:get_password_option/2"}], "repo": "https://github.com/erlang/otp", "vendor": "Erlang", "versions": [{"lessThan": "6.0.1", "status": "affected", "version": "6.0", "versionType": "otp"}]}, {"collectionURL": "https://github.com", "cpes": ["cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "modules": ["ssh_auth", "ssh_options"], "packageName": "erlang/otp", "packageURL": "pkg:github/erlang/otp", "product": "OTP", "programFiles": ["lib/ssh/src/ssh_auth.erl", "lib/ssh/src/ssh_options.erl"], "programRoutines": [{"name": "ssh_auth:check_password/3"}, {"name": "ssh_options:get_password_option/2"}], "repo": "https://github.com/erlang/otp", "vendor": "Erlang", "versions": [{"lessThan": "c342092ef4b369bb409d5b71ac8fd83bab74aedf", "status": "affected", "version": "032d1bc9491a3975c68faf9bc7776115d6ae3005", "versionType": "git"}]}], "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*", "matchCriteriaId": "F4AB1573-4E81-4338-B65A-B3C94C7249FA", "versionEndExcluding": "29.0.2", "versionStartIncluding": "29.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:erlang:erlang\\/ssh:*:*:*:*:*:*:*:*", "matchCriteriaId": "0BF9A1F8-83F5-4BEB-A972-3AF5B15947EF", "versionEndExcluding": "6.0.1", "versionStartIncluding": "6.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication.\n\nWhen the SSH daemon is configured with the user_passwords or password option, ssh_auth:check_password/3 performs a PBKDF2-SHA256 computation with 600,000 iterations (~300ms) for valid usernames, but returns immediately (~0ms) for invalid usernames via the ssh_options:get_password_option/2 path. This timing difference is detectable in a single authentication attempt and allows an unauthenticated attacker to distinguish valid from invalid usernames.\n\nThe user_passwords and password options are documented as intended for test purposes; the recommended alternative is pwdfun, which is not affected by this vulnerability.\n\nThis vulnerability is associated with program files lib/ssh/src/ssh_auth.erl and lib/ssh/src/ssh_options.erl.\n\nThis issue affects OTP from OTP\u00a029.0 before OTP\u00a029.0.2, corresponding to ssh from 6.0 before 6.0.1."}, {"lang": "es", "value": "Vulnerabilidad de discrepancia de tiempo observable en Erlang/OTP ssh (m\u00f3dulos ssh_auth, ssh_options) permite la enumeraci\u00f3n remota de nombres de usuario no autenticados a trav\u00e9s de un canal lateral de tiempo en la autenticaci\u00f3n de contrase\u00f1a.\n\nCuando el demonio SSH est\u00e1 configurado con la opci\u00f3n user_passwords o password, ssh_auth:check_password/3 realiza un c\u00e1lculo PBKDF2-SHA256 con 600.000 iteraciones (~300ms) para nombres de usuario v\u00e1lidos, pero regresa inmediatamente (~0ms) para nombres de usuario inv\u00e1lidos a trav\u00e9s de la ruta ssh_options:get_password_option/2. Esta diferencia de tiempo es detectable en un solo intento de autenticaci\u00f3n y permite a un atacante no autenticado distinguir nombres de usuario v\u00e1lidos de inv\u00e1lidos.\n\nLas opciones user_passwords y password est\u00e1n documentadas como destinadas a fines de prueba; la alternativa recomendada es pwdfun, que no se ve afectada por esta vulnerabilidad.\n\nEsta vulnerabilidad est\u00e1 asociada con los archivos de programa lib/ssh/src/ssh_auth.erl y lib/ssh/src/ssh_options.erl.\n\nEste problema afecta a OTP desde OTP 29.0 antes de 29.0.2 correspondiente a ssh desde 6.0 antes de 6.0.1."}], "id": "CVE-2026-48859", "lastModified": "2026-11-11T14:17:43.053", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-48859", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-10T16:19:16.914933Z", "version": "2.0.3"}}]}, "published": "2026-06-10T16:17:12.373", "references": [{"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Mitigation", "Third Party Advisory"], "url": "https://cna.erlef.org/cves/CVE-2026-48859.html"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "url": "https://github.com/erlang/otp/commit/032d1bc9491a3975c68faf9bc7776115d6ae3005"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Patch"], "url": "https://github.com/erlang/otp/commit/c342092ef4b369bb409d5b71ac8fd83bab74aedf"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://github.com/erlang/otp/security/advisories/GHSA-3w6p-vwhf-wvp4"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Mitigation", "Third Party Advisory"], "url": "https://osv.dev/vulnerability/EEF-CVE-2026-48859"}, {"source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "tags": ["Product"], "url": "https://www.erlang.org/doc/system/versions.html#order-of-versions"}], "sourceIdentifier": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-208"}], "source": "6b3ad84c-e1a6-4bf7-a703-f496b71e49db", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.0,6.0.1)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[29.0,29.0.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[032d1bc9491a3975c68faf9bc7776115d6ae3005,c342092ef4b369bb409d5b71ac8fd83bab74aedf)"}}], "enrichment": {"confidence": 90.0, "confidence_source": "inferred", "scores": [{"score": 90.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "erlang/otp", "vendor": "erlang"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[6.0,6.0.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "OTP", "source": "cna", "vendor": "Erlang"}, "product": "otp", "vendor": "erlang"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[29.0,29.0.2)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[032d1bc9491a3975c68faf9bc7776115d6ae3005,c342092ef4b369bb409d5b71ac8fd83bab74aedf)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "OTP", "source": "cna", "vendor": "Erlang"}, "product": "otp", "vendor": "erlang"}], "created": "2026-06-10T18:00:15.867856+00:00", "updated": "2026-08-04T19:00:10.783620+00:00", "vendors": ["erlang", "erlang$PRODUCT$erlang/otp", "erlang$PRODUCT$otp"]}