OPENSUSE-SU-2024:14105-1 teleport-15.4.7-1.1 on GA media

These are all security issues fixed in the teleport-15.4.7-1.1 package on the GA media of openSUSE Tumbleweed...

GO-2024-2442 Withdrawn Advisory: Teleport Access List owners can escalate their privileges in github.com/gravitational/teleport

Withdrawn Advisory: Teleport Access List owners can escalate their privileges in github.com/gravitational/teleport. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive repor...

GO-2024-2449 Withdrawn Advisory: User-provided environment values allow execution on macOS agents in github.com/gravitational/teleport

Withdrawn Advisory: User-provided environment values allow execution on macOS agents in github.com/gravitational/teleport. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positiv...

GO-2024-2447 Withdrawn Advisory: Teleport Proxy and Teleport Agents: SSRF to arbitrary hosts is possible from low privileged users in github.com/gravitational/teleport

Withdrawn Advisory: Teleport Proxy and Teleport Agents: SSRF to arbitrary hosts is possible from low privileged users in github.com/gravitational/teleport. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions...

OPENSUSE-SU-2024:14048-1 teleport-15.4.3-1.1 on GA media

These are all security issues fixed in the teleport-15.4.3-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13565-1 teleport-14.3.0-1.1 on GA media

These are all security issues fixed in the teleport-14.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13903-1 teleport-15.2.4-1.1 on GA media

These are all security issues fixed in the teleport-15.2.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13782-1 teleport-15.1.6-1.1 on GA media

These are all security issues fixed in the teleport-15.1.6-1.1 package on the GA media of openSUSE Tumbleweed...

Malicious code in teleport-app-example-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4554cad7be69cbff28d6e2e4d3535b5d7b4158f2efa1c79eaaf705151ec686ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1295 Malicious code in teleport-app-example-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4554cad7be69cbff28d6e2e4d3535b5d7b4158f2efa1c79eaaf705151ec686ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Teleport: SSRF in region parameter that leads to AWS Teleport role AWS account takeover

You have an Integration page in Teleport where one of the options is AWS OIDC which will allow people in Teleport to add resources fluently without actually having initial access to these resources or installing any agents on them. You will need to have connected and ready OIDC integration with A...

Privilege Escalation

github.com/gravitational/teleport is vulnerable to Privilege Escalation. The vulnerability is due to a flaw in the implementation of access list feature, which allows an attacker to escalate their privileges...

Unauthorized SFTP Access

teleport is vulnerable to unauthorized SFTP access. The vulnerability allows an attacker with access to teleport nodes within the cluster to initiate SFTP connections to the Proxy Service, resulting in unauthorized access to the service...

Server Side Request Forgery

github.com/gravitational/teleport is vulnerable to Server Side Request Forgery SSRF. The vulnerability is caused due to lack of proper validation or restrictions of the destinations for SSH connections initiated through the proxy or agents. This allows an authenticated user with valid credentials...

Code Execution

teleport is vulnerable to Code Execution. The vulnerability is due to improper validation on user supplied environment variables. This issue can be exploited by an attacker to execute arbitrary code on the MacOS systems...

GHSA-C9V7-WMWJ-VF6X Withdrawn Advisory: SFTP is possible on the Proxy server for any user with SFTP access

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects a binary, not a library in a supported ecosystem. Therefore, users of the library should not receive alerts. This link is maintained to preserve external references. Original Description Impact An attacker that...

GHSA-76CC-P55W-63G3 Withdrawn Advisory: Teleport Access List owners can escalate their privileges

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects a binary, not a library in a supported ecosystem. Therefore, users of the library should not receive alerts. This link is maintained to preserve external references. Original Description Impact Access Lists are ...

Withdrawn Advisory: Teleport Access List owners can escalate their privileges

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects a binary, not a library in a supported ecosystem. Therefore, users of the library should not receive alerts. This link is maintained to preserve external references. Original Description Impact Access Lists are ...

GHSA-HW4X-MCX5-9Q36 Withdrawn Advisory: Teleport Proxy and Teleport Agents: SSRF to arbitrary hosts is possible from low privileged users

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects a binary, not a library in a supported ecosystem. Therefore, users of the library should not receive alerts. This link is maintained to preserve external references. Original Description Impact An authenticated...

Withdrawn Advisory: Teleport Proxy and Teleport Agents: SSRF to arbitrary hosts is possible from low privileged users

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects a binary, not a library in a supported ecosystem. Therefore, users of the library should not receive alerts. This link is maintained to preserve external references. Original Description Impact An authenticated...