Skip to content
OpenAdvisories

Package · Go

github.com/jumpserver/jumpserver

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2023-42818

    SSH public key login without private key challenge if mfa is enabled in jumpserver

    JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH server does not verify the corresponding SSH private key. An attacker could exploit a vulnerability by utilizing a disclosed public key to a…

    jumpserver jumpserver github.com/jumpserver/koko github.com/jumpserver/jumpserver Go