CVE-2023-42820

Summary

CVE-2023-42820 is a vulnerability affecting JumpServer, an open-source bastion host. The issue stems from the exposure of the random number seed to the API, which could enable an attacker to replay randomly generated verification codes and reset passwords. This vulnerability only impacts users with local authentication enabled, and multi-factor authentication (MFA) provides an additional layer of protection. Users are strongly urged to upgrade to either version 2.28.19 or 3.6.5 to mitigate this risk, as there are currently no known workarounds or known ways to exploit this vulnerability aside from the aforementioned method.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.