Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 9:28 a.m.•22 views

CVE-2023-45140

The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. SCP and SFTP plugins don't honor group-based JIT MFA. Establishing a SCP/SFTP connection through The Bastion via a group access where MFA is enforced does not ask for additional factor. This abnorm...

4.8CVSS5.6AI score0.00387EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2023-49452

Malicious code in bioql PyPI...

4.8CVSS5.2AI score0.00387EPSS
SaveExploits0References2
NVD
NVD
•added 2023/11/08 4:15 p.m.•36 views

CVE-2023-45140

The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. SCP and SFTP plugins don't honor group-based JIT MFA. Establishing a SCP/SFTP connection through The Bastion via a group access where MFA is enforced does not ask for additional factor. This abnorm...

4.8CVSS0.00387EPSS
SaveExploits0References2
Prion
Prion
•added 2023/11/08 4:15 p.m.•25 views

Authorization

The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. SCP and SFTP plugins don't honor group-based JIT MFA. Establishing a SCP/SFTP connection through The Bastion via a group access where MFA is enforced does not ask for additional factor. This abnorm...

4.9CVSS7AI score0.00387EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/11/08 3:26 p.m.•43 views

CVE-2023-45140 Group-based JIT MFA bypass on scp and sftp in The Bastion

The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. SCP and SFTP plugins don't honor group-based JIT MFA. Establishing a SCP/SFTP connection through The Bastion via a group access where MFA is enforced does not ask for additional factor. This abnorm...

4.8CVSS5.4AI score0.00387EPSS
SaveExploits0References2
Mend
Mend
•added 2023/11/08 3:26 p.m.•4 views

CVE-2023-45140

The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. SCP and SFTP plugins don't honor group-based JIT MFA. Establishing a SCP/SFTP connection through The Bastion via a group access where MFA is enforced does not ask for additional factor. This abnorm...

4.8CVSS0.00387EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2023/11/08 3:26 p.m.•18 views

CVE-2023-45140 Group-based JIT MFA bypass on scp and sftp in The Bastion

The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. SCP and SFTP plugins don't honor group-based JIT MFA. Establishing a SCP/SFTP connection through The Bastion via a group access where MFA is enforced does not ask for additional factor. This abnorm...

4.8CVSS6.8AI score0.00387EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/08 12:00 a.m.•9 views

CVE-2023-45140: Missing Authentication for Critical Function

The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. SCP and SFTP plugins don't honor group-based JIT MFA. Establishing a SCP/SFTP connection through The Bastion via a group access where MFA is enforced does not ask for additional factor. This abnorm...

4.8CVSS5.5AI score0.00387EPSS
SaveExploits0References2
Rows per page
Query Builder