Skip to content
OpenAdvisories

Vendor

ovh

2 known vulnerabilities.

Products

the-bastion 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.4
    CVE-2025-59339

    The Bastion ttyrec files are not signed after encryption by the osh-encrypt-rsync script

    The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. Session-recording ttyrec files, may be handled by the provided osh-encrypt-rsync script that is a helper to rotate, encrypt, sign, copy, and optionally move th…

    ovh the-bastion
  • Medium 4.8
    CVE-2023-45140

    Group-based JIT MFA bypass on scp and sftp in The Bastion

    The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. SCP and SFTP plugins don't honor group-based JIT MFA. Establishing a SCP/SFTP connection through The Bastion via a group access where MFA is enforced does not …

    ovh the-bastion