← Back

CVE-2024-30170

nvd nist
Published: Aug 6, 2024Modified: Aug 12, 2024

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

PrivX before 34.0 allows data exfiltration and denial of service via the REST API. This is fixed in minor versions 33.1, 32.3, 31.3, and later, and in major version 34.0 and later,

Affected (3)

Products: Ssh: Privx
Ssh
1 product
Privx
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Ssh
Privx
From 22.0 to 31.3
Privx
From 32.0 to 32.3
Privx
Version 33.0

Related CWEs

CWE-400
Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (2)

Source: cve@mitre.org
ExploitVendor Advisory
Source: cve@mitre.org
Vendor Advisory

Timeline

No history available yet.