PT-2025-13783 · Unknown · Jumpserver

CVE-2025-27095

·

Publicado

2025-03-31

·

Atualizado

2025-11-12

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions JumpServer versions prior to 4.8.0 JumpServer versions prior to 3.10.18
Description The issue allows an attacker with a low-privileged account to access the Kubernetes session feature and manipulate the kubeconfig file. This manipulation enables the redirection of API requests to an external server controlled by the attacker, potentially leading to the interception and capture of the Kubernetes cluster token. As a result, this could allow unauthorized access to the cluster and compromise its security.
Recommendations For versions prior to 4.8.0, update to version 4.8.0 or later to resolve the issue. For versions prior to 3.10.18, update to version 3.10.18 or later to resolve the issue.

Exploit

Correção

Incorrect Privilege Assignment

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-266

Identificadores relacionados

BDU:2025-04770
CVE-2025-27095
GHSA-5Q9W-F4WH-F535

Produtos afetados

Jumpserver