Exploit for Improper Authentication in Fit2Cloud Jumpserver

🗓️ 14 Oct 2023 09:35:07Reported by tarimoeType

Exploit for Fit2Cloud Jumpserver: Unauthorized activities that could lead to password reset, download of operation recordings, and arbitrary command execution. Includes references to known vulnerabilities CVE-2023-42820, CVE-2023-42442, and RCE 2021. Users must ensure legal authorization and bear consequences of any illegal actions. Python3 is required for installation and usage.

Reporter	Title	Published	Views	Family All 29
GithubExploit	Exploit for Improper Authentication in Fit2Cloud Jumpserver	14 Oct 202309:35	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Fit2Cloud Jumpserver	10 Oct 202306:32	–	githubexploit
GithubExploit	Exploit for Path Traversal in Fit2Cloud Jumpserver	12 Oct 202308:45	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Fit2Cloud Jumpserver	27 Sep 202305:09	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Fit2Cloud Jumpserver	20 Oct 202308:33	–	githubexploit
ATTACKERKB	CVE-2023-42820	27 Sep 202300:00	–	attackerkb
BDU FSTEC	The vulnerability of the application software interface of the JumpServer system for security audits, which allows a perpetrator to trigger a service failure.	3 Oct 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the application software interface of the JumpServer system for auditing security operations and maintenance allows a perpetrator to bypass passwords.	10 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-42442	10 Oct 202320:32	–	circl
Circl	CVE-2023-42820	27 Sep 202308:10	–	circl

26 Aug 2025 04:13Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.18.2

EPSS0.88166

SSVC