jumpserver - CVE CyberSecurity Database News

Sep 27, 2023 API Exploit jumpserver

CVE-2023-43652 - How a Leaked Public Key Can Breach JumpServer – Explaining the Unauthenticated API Vulnerability

JumpServer is a popular open-source bastion host, used by organizations large and small to manage secure access to their internal systems over SSH. But in

CVE-2023-42820 - How an Exposed Random Seed in JumpServer Could Let Attackers Reset Your Password

Sep 27, 2023 API Exploit OAuth jumpserver

CVE-2023-42820 - How an Exposed Random Seed in JumpServer Could Let Attackers Reset Your Password

--- Overview CVE-2023-42820 is a security vulnerability that affects JumpServer, a popular open source bastion host. This issue comes down to weak handling of random

Sep 27, 2023 API jumpserver

CVE-2023-42819 - Directory Traversal Vulnerability in JumpServer Lets Attackers Read and Write Arbitrary Files

JumpServer is a widely used, open-source bastion host. Its job is to manage and protect critical infrastructure by controlling access to servers and other devices.