CVE-2023-42820

Severity CVSS v4.0:

Pending analysis

Type:

Unavailable / Other

Publication date:

27/09/2023

Last modified:

29/09/2023

Description

JumpServer is an open source bastion host. This vulnerability is due to exposing the random number seed to the API, potentially allowing the randomly generated verification codes to be replayed, which could lead to password resets. If MFA is enabled users are not affect. Users not using local authentication are also not affected. Users are advised to upgrade to either version 2.28.19 or to 3.6.5. There are no known workarounds or this issue.

Impact

Vector 3.x

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N CVSS v3.1 Severity and Metrics:

Base Score: 8.20 HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope (S): Unchanged
Confidentiality (C): Low
Integrity (I): High
Availability (A): None

Base Score 3.x

8.20

Severity 3.x

HIGH

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:fit2cloud:jumpserver::::::::	2.24.0 (including)	2.28.19 (excluding)
cpe:2.3:a:fit2cloud:jumpserver::::::::	3.0.0 (including)	3.6.5 (excluding)

To consult the complete list of CPE names with products and versions, see this page

CVE-2023-42820

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools