Privilege Escalation

github.com/gravitational/teleport is vulnerable to Privilege Escalation. The vulnerability is due to a flaw in the implementation of access list feature, which allows an attacker to escalate their privileges...

Unauthorized SFTP Access

teleport is vulnerable to unauthorized SFTP access. The vulnerability allows an attacker with access to teleport nodes within the cluster to initiate SFTP connections to the Proxy Service, resulting in unauthorized access to the service...

Server Side Request Forgery

github.com/gravitational/teleport is vulnerable to Server Side Request Forgery SSRF. The vulnerability is caused due to lack of proper validation or restrictions of the destinations for SSH connections initiated through the proxy or agents. This allows an authenticated user with valid credentials...

Code Execution

teleport is vulnerable to Code Execution. The vulnerability is due to improper validation on user supplied environment variables. This issue can be exploited by an attacker to execute arbitrary code on the MacOS systems...

GHSA-C9V7-WMWJ-VF6X Withdrawn Advisory: SFTP is possible on the Proxy server for any user with SFTP access

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects a binary, not a library in a supported ecosystem. Therefore, users of the library should not receive alerts. This link is maintained to preserve external references. Original Description Impact An attacker that...

Withdrawn Advisory: Teleport Access List owners can escalate their privileges

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects a binary, not a library in a supported ecosystem. Therefore, users of the library should not receive alerts. This link is maintained to preserve external references. Original Description Impact Access Lists are ...

GHSA-76CC-P55W-63G3 Withdrawn Advisory: Teleport Access List owners can escalate their privileges

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects a binary, not a library in a supported ecosystem. Therefore, users of the library should not receive alerts. This link is maintained to preserve external references. Original Description Impact Access Lists are ...

Withdrawn Advisory: Teleport Proxy and Teleport Agents: SSRF to arbitrary hosts is possible from low privileged users

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects a binary, not a library in a supported ecosystem. Therefore, users of the library should not receive alerts. This link is maintained to preserve external references. Original Description Impact An authenticated...

GHSA-HW4X-MCX5-9Q36 Withdrawn Advisory: Teleport Proxy and Teleport Agents: SSRF to arbitrary hosts is possible from low privileged users

Withdrawn Advisory This advisory has been withdrawn because the vulnerability affects a binary, not a library in a supported ecosystem. Therefore, users of the library should not receive alerts. This link is maintained to preserve external references. Original Description Impact An authenticated...

PT-2024-40333 · Teleport · Teleport

Name of the Vulnerable Software and Affected Versions: Teleport versions prior to 12.4.31 Teleport versions prior to 13.4.13 Teleport versions prior to 14.2.4 Description: An authenticated attacker with valid credentials can make non-blind Server-Side Request Forgery SSRF through the proxy and/or...

PT-2024-40147 · Teleport · Teleport

Name of the Vulnerable Software and Affected Versions: Teleport versions prior to 13.4.13 Teleport versions prior to 14.2.4 Description: An issue was discovered in Teleport's Access Lists feature, introduced in version 14 and currently under preview, allowing an Access List Owner to assign...

PT-2024-40475 · Teleport · Teleport

Name of the Vulnerable Software and Affected Versions: Teleport versions prior to 12.4.31 Teleport versions prior to 13.4.13 Teleport versions prior to 14.2.4 Description: The issue affects agents running on macOS, making them susceptible to unexpected code execution through user-supplied...

@offchainlabs/l1-l3-teleport-contracts (>=0.1.0-alpha.1, <=1.0.1) potentially affected by CVE-2023-49798 via @openzeppelin/contracts (4.9.4)

@openzeppelin/contracts NPM version 4.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on @openzeppelin/contracts and may be impacted: - @offchainlabs/l1-l3-teleport-contracts =0.1.0-alpha.1, =1.0.1 Source cves: CVE-2023-49798 Source advisory:...

Teleport: access list owner can escalate his role to the highest roles

Summary: 1. Go to your-domain.teleport.sh/web/accesslists. 2. Create a new access list and add a role to "Roles Granted," e.g., "reviewer" role. 3. Add a user as the Access List Owner. 4. The user, as the Access List Owner, can escalate the role of the list to higher roles, thereby escalating the...

CVE-2021-43819

Stargate-Bukkit is a mod for the minecraft video game which adds a portal focused environment. In affected versions Minecarts with chests will drop their items when teleporting through a portal; when they reappear, they will still have their items impacting the integrity of the game world. The...

Code injection

Stargate-Bukkit is a mod for the minecraft video game which adds a portal focused environment. In affected versions Minecarts with chests will drop their items when teleporting through a portal; when they reappear, they will still have their items impacting the integrity of the game world. The...

CVE-2021-43819

CVE-2021-43819 affects Stargate-Bukkit, a Minecraft mod adding portal-focused environments. In affected versions, minecarts with chests drop their items during portal teleport and reappear with items, indicating data handling via the teleport code is flawed. The issue is documented with a fix in ...

PT-2023-12493 · Mojang · Minecraft

Name of the Vulnerable Software and Affected Versions: Stargate-Bukkit versions prior to 0.11.5.1 Description: The issue affects the Stargate-Bukkit mod for the Minecraft video game, which adds a portal-focused environment. In affected versions, minecarts with chests will drop their items when...

Silence is golden partner for Truebot and Clop ransomware

A recent rise in the number of Truebot infections has been attributed to a threat actor known as the Silence Group. The Silence Group is an initial access broker IAB that frequently changes tools and tactics to stay on top of the game. An IAB's primary task is to find a weakness or vulnerability,...

Truebot exploits vulnerability in Netwrix to deploy Clop Ransomware

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary In 2017, Truebot was discovered to be linked to the Silence group and has affected more than 1,500 systems worldwide with shellcode, Cobalt Strike beacons, Grace malware, the Teleport tool, and Clop...