CVE-2024-45337: An offered SSH key becomes an authenticated role

A low-privilege authenticated SSH session receives the role belonging to a different offered key. Contain the exposed path and restore the affected workflow without weakening its security boundary.

Jamie Engineering lead · 02:13 a.m.

Travel bookings / ap-south. Investigate ssh-access, restore service, and verify the result.