CyberRota Analysis
AI-GeneratedTermix, a web-based server management platform, is vulnerable due to insufficient validation of destination addresses in the POST /host/db/proxy/test endpoint prior to version 2.3.2. This flaw allows authenticated users to probe internal networks and access sensitive metadata, potentially exposing cloud credentials and other critical infrastructure details. Organizations using Termix should prioritize upgrading to version 2.3.2 to mitigate the risk of unauthorized access and data leakage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /host/db/proxy/test endpoint accepts the singleProxy, proxyChain, and testTarget request fields without validating their destination addresses. The testProxyConnectivity path uses raw TCP and SOCKS connections to attacker-selected hosts and ports, allowing an authenticated user to probe localhost, private networks, link-local metadata services, and other infrastructure reachable from the Termix server. Structured connection errors disclose host reachability and timing information, and successful metadata access can expose cloud credentials. This issue is fixed in version 2.3.2.