CVE-2023-28110 in Jumpserver情報

要約

〜によって MITRE • 2023年03月16日

Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, refactoring coco's SSH/SFTP service and Web Terminal service. Prior to version 2.28.8, using illegal tokens to connect to a Kubernetes cluster through Koko can result in the execution of dangerous commands that may disrupt the Koko container environment and affect normal usage. The vulnerability has been fixed in v2.28.8.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

責任者

GitHub, Inc.

予約する

2023年03月10日

公開

2023年03月16日

モデレーション

承諾済み

エントリ

VDB-223225

CPE

準備完了

CWE

CWE-77 (確認済み)

CVSS

9.9 (NVD)

EPSS

0.00848

KEV

いいえ

アクティビティ

非常低い

ソース

MITRE	https://www.cve.org/CVERecord?id=CVE-2023-28110
NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-28110
CVE Details	https://www.cvedetails.com/cve/CVE-2023-28110/

◂ 前概要次 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!