PT-2024-40542 · Gravitational · Teleport

Published 2024-06-28 · Updated 2024-06-28

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: github.com/gravitational/teleport versions prior to 12.4.31 github.com/gravitational/teleport versions 13.0.0 through 13.4.12 github.com/gravitational/teleport versions 14.0.0 through 14.2.3

Description: The issue allows execution on macOS agents due to user-provided environment values.

Recommendations: For github.com/gravitational/teleport versions prior to 12.4.31, update to version 12.4.31 or later. For github.com/gravitational/teleport versions 13.0.0 through 13.4.12, update to version 13.4.13 or later. For github.com/gravitational/teleport versions 14.0.0 through 14.2.3, update to version 14.2.4 or later.

Related Identifiers

GO-2024-2449

Affected Products

Teleport

References · 4

• https://osv.dev/vulnerability/GO-2024-2449 · Vendor Advisory
• https://github.com/gravitational/teleport/commit/fcc97de9f99dfec8696ecfd620672a26f29cf9ac · Note
• https://github.com/gravitational/teleport/pull/36132 · Note
• https://github.com/gravitational/teleport/security/advisories/GHSA-vfxf-76hv-v4w4 · Note