Critical · published September 30, 2025
⚡ A compromised container could become a hacker's playground! With insecure SSH settings, attackers can snatch your private keys and waltz through your environment. 🔥 Picture a security guard who leaves the front door wide open and hands out keys without checking IDs. This is what happens when SSH verification is disabled: it allows anyone to walk right in! An attacker with access to just one compromised container can connect to a malicious SSH server, capturing your private keys like a thief in the night. Once they have those keys, they can move laterally across your entire environment, accessing sensitive resources and wreaking havoc.
Picture a security guard who leaves the front door wide open and hands out keys without checking IDs. This is what happens when SSH verification is disabled: it allows anyone to walk right in! This vulnerability arises from Docker instances configured with insecure SSH options that disable host verification and automatically forward SSH-agent credentials, allowing for potential unauthorized access.
An attacker with access to just one compromised container can connect to a malicious SSH server, capturing your private keys like a thief in the night. Once they have those keys, they can move laterally across your entire environment, accessing sensitive resources and wreaking havoc. Upgrade your Vasion Print (formerly PrinterLogic) Virtual Appliance Host to version 22.0.1049 or the Application to version 20.0.2786 immediately. Review your SSH configurations to ensure strict host key checking is enabled and do not forward your SSH-agent without verification. 🛡️ You've got this! By patching and securing your SSH settings, you'll fortify your defenses and keep those hackers at bay! 💪✨
| Product | Versions | Fixed in |
|---|---|---|
| vasion/virtual_appliance_application | < 20.0.2786 | 20.0.2786 |
| vasion/virtual_appliance_host | < 22.0.1049 | 22.0.1049 |