The vulnerability arises from the SSH client configuration in Vasion Print Virtual Appliance Host and Application versions prior to 22.0.1049 and 20.0.2786 respectively. The SSH client is configured with 'UserKnownHostsFile=/dev/null', 'StrictHostKeyChecking=no', and 'ForwardAgent yes', which disables verification of remote SSH host keys and forwards the SSH agent to any host matching wildcard patterns. An attacker with access to a compromised container can exploit this by connecting to a malicious SSH server, capturing forwarded private keys, and using them for unrestricted lateral movement within the environment. This vulnerability is tracked as V-2024-027 by the vendor and is classified under CWE-522 (Insufficiently Protected Credentials) and CWE-306 (Missing Authentication for Critical Function).

An attacker who gains access to a single compromised container can exploit the insecure SSH configuration to capture forwarded private keys. This enables unrestricted lateral movement across the environment, potentially compromising multiple systems. The vulnerability has a CVSS 4.0 base score of 7.9, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, but with high scope and impact on integrity and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. There are no provided patch links or official fixes noted in the available data. Until a patch or official fix is released, organizations should consider restricting network access to containers, disabling SSH agent forwarding within Docker instances, or applying configuration changes to enforce strict host key verification to mitigate risk.