CVE-2023-42818
Medium
Description
JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH server does not verify the corresponding SSH private key. An attacker could exploit a vulnerability by utilizing a disclosed public key to attempt brute-force authentication against the SSH service This issue has been patched in versions 3.6.5 and 3.5.6. Users are advised to upgrade. There are no known workarounds for this issue.
SeverityMedium
CVSS5.4
Exploit probability52. percentile0.7%
ProductFit2cloud Jumpserver
PublishedSep 27, 2023
First seenSep 27, 2023
Weakness typeCWE-287Improper authentication
How to fix
Update
- fit2cloud jumpserver3.5.6, 3.6.5 or later
- github.com/jumpserver/jumpserver3.5.6+incompatible, 3.6.5+incompatible or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fit2cloud jumpserver | v < 3.5.6, 3.6.0 ≤ v < 3.6.5 | 3.5.6, 3.6.5 |
| github.com/jumpserver/kokoGo | No range specified | — |
| github.com/jumpserver/jumpserverGo | v < 3.5.6+incompatible, 3.6.0+incompatible ≤ v < 3.6.5+incompatible | 3.5.6+incompatible, 3.6.5+incompatible |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.