SSH Communication Security PrivX User Impersonation Vulnerability

A user impersonation vulnerability has been identified in SSH Communication Security PrivX versions 18.0 prior to 36.0. The issue arises from inadequate validation of public key signatures in native SSH connections through a proxy port. This flaw enables a PrivX user (account A) to impersonate another user (account B) and access SSH target hosts available to account B.

Impact

Exploitation of this vulnerability allows a PrivX user to impersonate another user and gain unauthorized access to SSH target hosts that the impersonated user can access.

Remediation

Users are advised to upgrade to PrivX versions 35.3, 36.1, 37.0 or later. If an immediate upgrade is not possible, and the feature of connecting with the native SSH client via ProxyCommand is not used, the proxy port 1080 can be blocked on PrivX nodes.