CVEvulnerability

CVE-2024-47857

9.8 CRITICAL Published 2025-01-31 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-01-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-20

Description

SSH Communication Security PrivX versions between 18.0-36.0 implement insufficient validation on public key signatures when using native SSH connections via a proxy port. This allows an existing PrivX "account A" to impersonate another existing PrivX "account B" and gain access to SSH target hosts to which the "account B" has access.

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References