teleport:parse_fuzz: Crash in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=5854770391810048 Project: teleport Fuzzing Engine: libFuzzer Fuzz Target: parsefuzz Job Type: libfuzzerasanteleport Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000201320 Crash State: pthreadcreate cgotrypthreadcreate...

teleport:parse_fuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5483099994587136 Project: teleport Fuzzing Engine: libFuzzer Fuzz Target: parsefuzz Job Type: libfuzzerasanteleport Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

teleport:utils_fuzz: Null-dereference READ in pthread_create

Detailed Report: https://oss-fuzz.com/testcase?key=4918213027692544 Project: teleport Fuzzing Engine: libFuzzer Fuzz Target: utilsfuzz Job Type: libfuzzerasanteleport Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash State: pthreadcreate cgotrypthreadcreate...

teleport:parse_fuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5192281404604416 Project: teleport Fuzzing Engine: libFuzzer Fuzz Target: parsefuzz Job Type: libfuzzerasanteleport Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

teleport:parse_fuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4889639732248576 Project: teleport Fuzzing Engine: libFuzzer Fuzz Target: parsefuzz Job Type: libfuzzerasanteleport Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

teleport:parse_fuzz: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6464828869836800 Project: teleport Fuzzing Engine: libFuzzer Fuzz Target: parsefuzz Job Type: libfuzzerasanteleport Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xffffffffffffffff Crash State: NULL Sanitizer: address ASAN Recommende...

teleport:parse_fuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5217208646107136 Project: teleport Fuzzing Engine: libFuzzer Fuzz Target: parsefuzz Job Type: libfuzzerasanteleport Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

CVE-2018-19555

tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password...

CVE-2018-19555

tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password...

Default credentials

tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password...

CVE-2018-19555

tp4a TELEPORT 3.1.0 is affected by a CSRF vulnerability that allows an attacker to use the user/do-reset-password endpoint to change any password, including the administrator password. This is documented across multiple sources (NVD/NVD-derived refs, OSV, CVE lists) as a CSRF flaw that enables un...

CVE-2018-19555

tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password...

TELEPORT Cross-Site Request Forgery Vulnerability

tp4a TELEPORT is a bastion system. The system supports hopping and management of RDP and SSH protocols. A cross-site request forgery vulnerability exists in tp4a TELEPORT version 3.1.0. A remote attacker can exploit this vulnerability to change arbitrary passwords e.g., administrator password wit...

CVE-2018-19555: Cross-Site Request Forgery (CSRF)

tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password...

PT-2018-15000

Name of the Vulnerable Software and Affected Versions TELEPORT version 3.1.0 Description The issue allows for a CSRF attack via the "user/do-reset-password" endpoint to change any password, including the administrator password. Recommendations For version 3.1.0, as a temporary workaround, conside...

TELEPORT Cross-Site Scripting Vulnerability

tp4a TELEPORT is a bastion system. The system supports hopping and management of RDP and SSH protocols. A cross-site scripting vulnerability exists in tp4a TELEPORT version 3.1.0, which stems from the program failing to properly handle specially crafted usernames. A remote attacker can exploit th...

Cross site scripting

tp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when an administrator later views the system log...

CVE-2018-19301

tp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when an administrator later views the system log...

CVE-2018-19301

tp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when an administrator later views the system log...

CVE-2018-19301

tp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when an administrator later views the system log...