Vulnerability Description
PrivX before 34.0 allows data exfiltration and denial of service via the REST API. This is fixed in minor versions 33.1, 32.3, 31.3, and later, and in major version 34.0 and later,
CVSS Score
9.1
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ssh | Privx | >= 22.0, < 31.3 |
Related Weaknesses (CWE)
References
- https://info.ssh.com/improper-input-validation-faqExploitVendor Advisory
- https://privx.docs.ssh.com/docs/securityVendor Advisory
FAQ
What is CVE-2024-30170?
CVE-2024-30170 is a vulnerability with a CVSS score of 9.1 (CRITICAL). PrivX before 34.0 allows data exfiltration and denial of service via the REST API. This is fixed in minor versions 33.1, 32.3, 31.3, and later, and in major version 34.0 and later,
How severe is CVE-2024-30170?
CVE-2024-30170 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2024-30170?
Check the references section above for vendor advisories and patch information. Affected products include: Ssh Privx.