PT-2024-40540 · Gravitational · Teleport

Published 2024-06-28 · Updated 2024-06-28

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: github.com/gravitational/teleport versions prior to 12.4.31 github.com/gravitational/teleport versions 13.0.0 through 13.4.12 github.com/gravitational/teleport versions 14.0.0 through 14.2.3

Description: The issue allows SFTP access on the Proxy server for any user with SFTP access.

Recommendations: For versions prior to 12.4.31, update to version 12.4.31 or later. For versions 13.0.0 through 13.4.12, update to version 13.4.13 or later. For versions 14.0.0 through 14.2.3, update to version 14.2.4 or later.

Related Identifiers

GO-2024-2445

Affected Products

Teleport

References · 4

• https://osv.dev/vulnerability/GO-2024-2445 · Vendor Advisory
• https://github.com/gravitational/teleport/commit/1c77fc49944ebcded32bbdd77c3e1f4f8a1c130d · Note
• https://github.com/gravitational/teleport/pull/36136 · Note
• https://github.com/gravitational/teleport/security/advisories/GHSA-c9v7-wmwj-vf6x · Note