The Level Nine research team identified a backdoor login function written into the Priva Office application. This backdoor allows complete access to the Priva administrative interface and is not listed in the application user interface as a user account. A weak method is employed by the application to generate the special login password. The research team developed a script that successfully automates the generation of the backdoor password for accessing vulnerable installations.
The Priva application bytecode indicates that when a username of 'SUPER___' is provided, the password for this hidden account is compared to a real-time generated value from the internal software function specialPassword(). This function generates the current (today) user password from the calendar date. As a result, a threat actor with knowledge of this password generation pattern could abuse it to gain access to any Priva system.
The Priva Office application contains a backdoor login function that grants complete access to the administrative interface. The account does not appear anywhere in the application user interface as a user. Advisory L9-16-481 covers Priva Office 9.0.0 and files the finding under hidden functionality.
The application bytecode shows that when the username SUPER___ is supplied, the password is compared against a value generated in real time by an internal function called specialPassword. That function derives the current password from the calendar date, so the valid password changes daily and can be calculated by anyone who knows the pattern.
No. The advisory states the backdoor is not listed in the application user interface as a user account, so it will not show up in a normal review of Priva Office users. The research team identified it in the application bytecode rather than in the interface.
The Level Nine research team identified the backdoor login function in Priva Office. Advisory L9-16-481 was first published on August 13, 2025 and last updated on October 27, 2025. Impact is listed as Unranked, and the advisory covers Priva Office version 9.0.0.
The backdoor allows complete access to the Priva administrative interface. The advisory notes the research team developed a script that automates generation of the backdoor password, and that a threat actor who knows the generation pattern could use it against any Priva system running the affected version.