PT-2024-23222 · Privx · Privx

Published 2024-08-06 · Updated 2024-08-12 · CVE-2024-30170

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions PrivX versions prior to 34.0

Description The issue allows data exfiltration and denial of service via the REST API.

Recommendations For versions prior to 34.0, update to version 34.0 or later to resolve the issue. Alternatively, for earlier major versions, update to minor versions 33.1, 32.3, or 31.3, or later, to fix the problem.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2024-30170

Affected Products

Privx

References · 5

• 🔥 https://info.ssh.com/improper-input-validation-faq · Exploit
• https://osv.dev/vulnerability/CVE-2024-30170 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-30170 · Security Note
• https://privx.docs.ssh.com/docs/security · Vendor Advisory
• https://t.me/cvedetector/2596 · Telegram Post