View the security misconfiguration catalog
  • Misconfiguration Name
  • SSH MaxSessions parameter is not limited to 4 sessions
  • Description
  • SSH protocol allows you to connect to a remote Linux system securely using a variety of SSH (Secure Shell) clients. The SSH protocol has the ability to provide multiple sessions over a single connection without reauthentication. A compromised client could use this feature to establish additional sessions to a system without consent or knowledge of the user. Fixing this misconfiguration will configure the MaxSessions parameter permit only 4 sessions per connections.
  • Severity
  • important
  • Category
  • Linux Secure Shell
  • Resolution
  • Follow the below steps to resolve the misconfiguration. Edit the /etc/ssh/sshd_config file to set the parameter as follows:
    MaxSessions 4
  • Potential issues that may arise after applying the resolution
  • Altering the existing security setting may create the following impact in your network operations.
  • Does remediation require reboot?
  • No