Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-6XF3-5HP7-XQQG
HistoryAug 25, 2022 - 12:00 a.m.

Improper token validation leading to code execution in Teleport

2022-08-2500:00:28
CWE-20
CWE-77
GitHub Advisory Database
github.com
17
teleport
command injection
remote code execution
url encoding
bash escape
carriage return line feed
social engineering
unauthenticated attack
trusted teleport server

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.031

Percentile

91.2%

JSON

Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return line feed. This url encoded payload can be used in place of a token and sent to a user in a social engineering attack. This is fully unauthenticated attack utilizing the trusted teleport server to deliver the payload.

Affected configurations

Vulners
Node
gravitationalteleportRange10.0.0–10.1.2
OR
gravitationalteleportRange9.0.0–9.3.13
OR
gravitationalteleportRange<8.3.17
VendorProductVersionCPE
gravitationalteleport*cpe:2.3:a:gravitational:teleport:*:*:*:*:*:*:*:*

Related

osv 3
cve 1
prion 1
zdt 2
veracode 1
nvd 1
packetstorm 2
exploitdb 1
cvelist 1
ibm 1
osv
osv
CGA-cp25-64gp-6fm3
2024-06-06 12:26:44
Improper token validation leading to code execution in Teleport
2022-08-25 00:00:28
CVE-2022-36633
2022-08-24 13:15:08
cve
cve
CVE-2022-36633
2022-08-24 13:15:08
prion
prion
Command injection
2022-08-24 13:15:00
zdt
zdt
Teleport v10.1.1 - Remote Code Execution Vulnerability
2022-09-23 00:00:00
Teleport 9.3.6 Command Injection Vulnerability
2022-08-23 00:00:00
veracode
veracode
Command Injection
2022-08-25 12:54:27
nvd
nvd
CVE-2022-36633
2022-08-24 13:15:08
packetstorm
packetstorm
Teleport 10.1.1 Remote Code Execution
2022-09-23 00:00:00
Teleport 9.3.6 Command Injection
2022-08-23 00:00:00
exploitdb
exploitdb
Teleport v10.1.1 - Remote Code Execution (RCE)
2022-09-23 00:00:00
cvelist
cvelist
CVE-2022-36633
2022-08-24 12:29:54
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in IBM Cloud Pak for Multicloud Management
2024-09-25 17:28:27

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.031

Percentile

91.2%

JSON
Related for GHSA-6XF3-5HP7-XQQG
osv3cve1prion1zdt2veracode1nvd1packetstorm2exploitdb1cvelist1ibm1