PT-2025-13783 · Unknown · Jumpserver

Published

2025-03-31

·

Updated

2025-11-12

·

CVE-2025-27095

CVSS v3.1

4.3

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions JumpServer versions prior to 4.8.0 JumpServer versions prior to 3.10.18
Description The issue allows an attacker with a low-privileged account to access the Kubernetes session feature and manipulate the kubeconfig file. This manipulation enables the redirection of API requests to an external server controlled by the attacker, potentially leading to the interception and capture of the Kubernetes cluster token. As a result, this could allow unauthorized access to the cluster and compromise its security.
Recommendations For versions prior to 4.8.0, update to version 4.8.0 or later to resolve the issue. For versions prior to 3.10.18, update to version 3.10.18 or later to resolve the issue.

Exploit

Fix

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

BDU:2025-04770
CVE-2025-27095
GHSA-5Q9W-F4WH-F535

Affected Products

Jumpserver