Vasion Print Insecure SSH Client Configuration Vulnerability

A vulnerability exists in Vasion Print Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786. The issue arises because the SSH client within Docker instances is configured to disable host key verification and forward the SSH agent to potentially malicious servers. This could allow an attacker to intercept private keys and use them for unauthorized access within the environment.

Impact

Exploitation of this vulnerability could lead to interception of SSH private keys, allowing for unauthorized lateral movement within the environment.

Remediation

Users can update to Vasion Print Virtual Appliance Host 22.0.1049 and Application 20.0.2786 to address this vulnerability.