CVE-2023-28110
Prior to version 2.28.8, using illegal tokens to connect to a Kubernetes cluster through Koko can result in the execution of dangerous commands that may disrupt the Koko container environment and affect normal usage.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.85%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, refactoring coco's SSH/SFTP service and Web Terminal service. Prior to version 2.28.8, using illegal tokens to connect to a Kubernetes cluster through Koko can result in the execution of dangerous commands that may disrupt the Koko container environment and affect normal usage. The vulnerability has been fixed in v2.28.8.
- CVSS 3.1
- 9.9 CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- EPSS
- 0.85% probability · 56th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-77
- Affected
- fit2cloud/jumpserver · fit2cloud/koko
- Source
- security-advisories@github.com
References
- https://github.com/jumpserver/jumpserver/releases/tag/v2.28.8Patch, Release Notes
- https://github.com/jumpserver/jumpserver/security/advisories/GHSA-6x5p-jm59-jh29Exploit, Vendor Advisory
- https://github.com/jumpserver/jumpserver/releases/tag/v2.28.8Patch, Release Notes
- https://github.com/jumpserver/jumpserver/security/advisories/GHSA-6x5p-jm59-jh29Exploit, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.