CVE-2019-6109

CVE-2019-6109 is a medium-severity vulnerability in OpenSSH 7.9, affecting various products including Debian, Red Hat, and WinSCP. A malicious server or Man-in-The-Middle attacker can exploit missing character encoding in the progress display to manipulate client output using ANSI control codes, potentially hiding additional files during transfer. The attack requires user interaction and has high impact on confidentiality and integrity, but high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion or media coverage for this vulnerability.