PT-2024-40541 · Teleport · Teleport

Published 2024-06-28 · Updated 2024-06-28

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: Teleport versions prior to 12.4.31 Teleport versions 13.0.0 through 13.4.12 Teleport versions 14.0.0 through 14.2.3

Description: The issue allows low-privileged users to perform a Server-Side Request Forgery (SSRF) attack, enabling access to arbitrary hosts.

Recommendations: For versions prior to 12.4.31, update to version 12.4.31 or later. For versions 13.0.0 through 13.4.12, update to version 13.4.13 or later. For versions 14.0.0 through 14.2.3, update to version 14.2.4 or later.

Related Identifiers

GO-2024-2447

Affected Products

Teleport

References · 4

• https://osv.dev/vulnerability/GO-2024-2447 · Vendor Advisory
• https://github.com/gravitational/teleport/security/advisories/GHSA-hw4x-mcx5-9q36 · Note
• https://github.com/gravitational/teleport/pull/36127 · Note
• https://github.com/gravitational/teleport/commit/bb2d67d357e868254a21ed7cb132030d7bf9fcbc · Note