* OpenSSH versions earlier than 6.9p1-2 allowed successive login attempts that
  exceeded the configured limits when keyboard-interactive challenge-response
  authentication was used. This allowed a remote attacker to perform a
  brute-force attack or cause a denial of service.
  
  NOTE:  Although the vulnerability is fixed, OneFS is still running a version
  OpenSSH prior to 6.9. As such, signature-based security scanners that check
  only the reported version of OpenSSH may still incorrectly report that
  systems containing this fix are vulnerable. These reports should be
  considered "false positives" and can safely be ignored.

  For more information, see article 207853 on the EMC Online Support site.
