CVE-2023-43652 is a critical authentication bypass vulnerability affecting JumpServer, an open-source bastion host. It allows unauthenticated attackers to log in to the core API using only a username and a leaked SSH public key, without requiring the corresponding private key or a password. This flaw stems from the KoKo component's API not verifying request sources when generating authentication tokens. With a CVSS score of 9.1 (CRITICAL), this vulnerability has a network attack vector, low attack complexity, and can lead to complete compromise of user information and authorized actions. While there is no evidence of active exploitation, no known public exploit code, and it is not listed in the KEV catalog, the vulnerability has garnered significant community attention with 10 mentions. Users are strongly advised to upgrade to JumpServer versions 2.28.20 or 3.7.1 immediately, as no workarounds exist.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 2.0.0, < 2.28.20CPE matchmatch criteria | cpe:2.3:a:fit2cloud:jumpserver:*:*:*:*:*:*:*:* | ||
>= 3.0.0, < 3.7.1CPE matchmatch criteria | cpe:2.3:a:fit2cloud:jumpserver:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.