CVE-2024-34713

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

sshproxy is used on a gateway to transparently proxy a user SSH connection on the gateway to an internal host via SSH. Prior to version 1.6.3, any user authorized to connect to a ssh server using `sshproxy` can inject options to the `ssh` command executed by `sshproxy`. All versions of `sshproxy` are impacted. The problem is patched starting in version 1.6.3. The only workaround is to use the `force_command` option in `sshproxy.yaml`, but it's rarely relevant.

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-77

Affected software

VendorProductVersions
cea-hpcsshproxy< 1.6.3
cea-hpcsshproxy< 1.6.3

References

Timeline

Published
May 14, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-347147.6The Hoppscotch Browser Extension is a browser extension for Hoppscotch, a community-driven end-to-end open-source API development ecosystem.CVE-2024-347153.3Fides is an open-source privacy engineering platform. The Fides webserver requires a connection to a hosted PostgreSQL database for persisteCVE-2024-347166.1PrestaShop is an open source e-commerce web application. A cross-site scripting (XSS) vulnerability that only affects PrestaShops with custoCVE-2024-347175.3PrestaShop is an open source e-commerce web application. In PrestaShop 8.1.5, any invoice can be downloaded from front-office in anonymous mCVE-2024-347197.8In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege CVE-2024-34725.9The Modal Window WordPress plugin before 5.3.10 does not have CSRF check in place when bulk deleting modals, which could allow attackers toCVE-2024-347207.8In com_android_internal_os_ZygoteCommandBuffer_nativeForkRepeatedly of com_android_internal_os_ZygoteCommandBuffer.cpp, there is a possible CVE-2024-347215.5In ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by another user due to improper input validation. CVE-2024-347228.8In smp_proc_rand of smp_act.cc, there is a possible authentication bypass during legacy BLE pairing due to incorrect implementation of a proCVE-2024-347237.8In onTransact of ParcelableListBinder.java , there is a possible way to steal mAllowlistToken to launch an app from background due to a logiCVE-2024-347247.0In _UnrefAndMaybeDestroy of pmr.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalationCVE-2024-347257.0In DevmemIntUnexportCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to loca