CVE-2024-40628

CVE-2024-40628 is a critical arbitrary file read vulnerability affecting JumpServer, an open-source Privileged Access Management (PAM) tool. An unauthenticated attacker can exploit a flaw in the Ansible playbook to read arbitrary files within the Celery container, which runs as root and has database access. This allows for sensitive information disclosure, including the potential to steal all host secrets, create administrative accounts, or manipulate the database. The vulnerability has a CVSS score of 9.1 (Critical) due to its network-based attack vector, low attack complexity, and high impact on confidentiality and integrity. While there is no known active exploitation or public exploit code, the vulnerability has garnered community discussion and has been addressed in JumpServer versions 3.10.12 and 4.0.0, with no known workarounds.