GO-2024-2449 Withdrawn Advisory: User-provided environment values allow execution on macOS agents in github.com/gravitational/teleport

Withdrawn Advisory: User-provided environment values allow execution on macOS agents in github.com/gravitational/teleport. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positiv...

PT-2024-40542

Name of the Vulnerable Software and Affected Versions: github.com/gravitational/teleport versions prior to 12.4.31 github.com/gravitational/teleport versions 13.0.0 through 13.4.12 github.com/gravitational/teleport versions 14.0.0 through 14.2.3 Description: The issue allows execution on macOS...

PT-2024-40541

Name of the Vulnerable Software and Affected Versions: Teleport versions prior to 12.4.31 Teleport versions 13.0.0 through 13.4.12 Teleport versions 14.0.0 through 14.2.3 Description: The issue allows low-privileged users to perform a Server-Side Request Forgery SSRF attack, enabling access to...

PT-2024-40540

Name of the Vulnerable Software and Affected Versions: github.com/gravitational/teleport versions prior to 12.4.31 github.com/gravitational/teleport versions 13.0.0 through 13.4.12 github.com/gravitational/teleport versions 14.0.0 through 14.2.3 Description: The issue allows SFTP access on the...

PT-2024-40539

Name of the Vulnerable Software and Affected Versions: Teleport versions 13.0.0 through 13.4.12 Teleport versions 14.0.0 through 14.2.3 Description: The issue allows Teleport Access List owners to escalate their privileges. This is related to the github.com/gravitational/teleport module...

OPENSUSE-SU-2024:14048-1 teleport-15.4.3-1.1 on GA media

These are all security issues fixed in the teleport-15.4.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13782-1 teleport-15.1.6-1.1 on GA media

These are all security issues fixed in the teleport-15.1.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13903-1 teleport-15.2.4-1.1 on GA media

These are all security issues fixed in the teleport-15.2.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13565-1 teleport-14.3.0-1.1 on GA media

These are all security issues fixed in the teleport-14.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

Malware in teleport-app-example-node

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in teleport-app-example-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4554cad7be69cbff28d6e2e4d3535b5d7b4158f2efa1c79eaaf705151ec686ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1295 Malicious code in teleport-app-example-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4554cad7be69cbff28d6e2e4d3535b5d7b4158f2efa1c79eaaf705151ec686ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Teleport: SSRF in region parameter that leads to AWS Teleport role AWS account takeover

You have an Integration page in Teleport where one of the options is AWS OIDC which will allow people in Teleport to add resources fluently without actually having initial access to these resources or installing any agents on them. You will need to have connected and ready OIDC integration with A...

Privilege Escalation

github.com/gravitational/teleport is vulnerable to Privilege Escalation. The vulnerability is due to a flaw in the implementation of access list feature, which allows an attacker to escalate their privileges...

Unauthorized SFTP Access

teleport is vulnerable to unauthorized SFTP access. The vulnerability allows an attacker with access to teleport nodes within the cluster to initiate SFTP connections to the Proxy Service, resulting in unauthorized access to the service...

Server Side Request Forgery

github.com/gravitational/teleport is vulnerable to Server Side Request Forgery SSRF. The vulnerability is caused due to lack of proper validation or restrictions of the destinations for SSH connections initiated through the proxy or agents. This allows an authenticated user with valid credentials...

Code Execution

teleport is vulnerable to Code Execution. The vulnerability is due to improper validation on user supplied environment variables. This issue can be exploited by an attacker to execute arbitrary code on the MacOS systems...

GHSA-C9V7-WMWJ-VF6X Withdrawn Advisory: SFTP is possible on the Proxy server for any user with SFTP access

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects a binary, not a library in a supported ecosystem. Therefore, users of the library should not receive alerts. This link is maintained to preserve external references. Original Description Impact An attacker that...

Withdrawn Advisory: Teleport Access List owners can escalate their privileges

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects a binary, not a library in a supported ecosystem. Therefore, users of the library should not receive alerts. This link is maintained to preserve external references. Original Description Impact Access Lists are ...

GHSA-76CC-P55W-63G3 Withdrawn Advisory: Teleport Access List owners can escalate their privileges

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects a binary, not a library in a supported ecosystem. Therefore, users of the library should not receive alerts. This link is maintained to preserve external references. Original Description Impact Access Lists are ...