Beveiligingsadvies

CVE-2024-47857

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-01-31 00:00:00
Laatst bijgewerkt 2025-03-18 19:40:31
Toegewezen door mitre
CVSS-score 9.8
Status PUBLISHED

Beschrijving

SSH Communication Security PrivX versions between 18.0-36.0 implement insufficient validation on public key signatures when using native SSH connections via a proxy port. This allows an existing PrivX "account A" to impersonate another existing PrivX "account B" and gain access to SSH target hosts to which the "account B" has access.