PCI - OpenSSH Privilege Escalation Vulnerability (CVE-2021-41617)

Symptoms

A PCI scan for a cPanel server returns OpenSSH is vulnerable to CVE-2021-41617.

Description 

PCI scans detect vulnerabilities in the operating system or other software. Many vulnerabilities are false matches on updated systems.

Workaround

Report this as a false match to the PCI vendor. See the below article for more details on reporting false matches.

• PCI Failure Reports and How To Address Them

Neither of the functions required to exploit this vulnerability is enabled by default for versions of OpenSSH shipped by Red Hat 7 and 8.

Statement from RedHat:

• https://access.redhat.com/security/cve/cve-2021-41617