CVE-2024-47857

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

SSH Communication Security PrivX versions between 18.0-36.0 implement insufficient validation on public key signatures when using native SSH connections via a proxy port. This allows an existing PrivX "account A" to impersonate another existing PrivX "account B" and gain access to SSH target hosts to which the "account B" has access.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Jan 31, 2025
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-47862.8An improper validation vulnerability was reported in the Lenovo Tab K10 that could allow a specially crafted application to keep the device CVE-2024-478636.2An issue was discovered in Centreon Web 24.10.x before 24.10.0, 24.04.x before 24.04.8, 23.10.x before 23.10.18, 23.04.x before 23.04.23, an CVE-2024-478645.3home 5G HR02, Wi-Fi STATION SH-52B, and Wi-Fi STATION SH-54C contain a buffer overflow vulnerability in the hidden debug function. A remote CVE-2024-478655.3Missing authentication for critical function vulnerability exists in Rakuten Turbo 5G firmware version V1.3.18 and earlier. If this vulnerab CVE-2024-478667.5Ceph is a distributed object, block, and file storage platform. In versions up to and including 19.2.3, using the argument `x-amz-copy-sourc CVE-2024-478677.5Gradio is an open-source Python package designed for quick prototyping. This vulnerability is a **lack of integrity check** on the downloade CVE-2024-478687.5Gradio is an open-source Python package designed for quick prototyping. This is a **data validation vulnerability** affecting several Gradio CVE-2024-478693.7Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **timing attack** in the way Gradio co CVE-2024-47875.8The Cost Calculator Builder PRO for WordPress is vulnerable to arbitrary email sending vulnerability in versions up to, and including, 3.1.7 CVE-2024-478708.1Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves a **race condition** in the `update_root CVE-2024-478719.1Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves **insecure communication** between the F CVE-2024-478725.4Gradio is an open-source Python package designed for quick prototyping. This vulnerability involves **Cross-Site Scripting (XSS)** on any Gr