PT-2025-44436 · Unknown · Jumpserver

Published 2025-10-30 · Updated 2025-10-30 · CVE-2025-62795

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions JumpServer versions prior to 3.10.21-lts JumpServer versions prior to 4.10.12-lts

Description JumpServer, an open source bastion host and operation and maintenance security audit system, contains an issue where a low-privileged authenticated user can bypass authorization checks. This is possible by sending crafted messages to the /ws/ldap/ WebSocket endpoint, allowing the user to invoke LDAP configuration tests and initiate LDAP synchronization. Successful exploitation could lead to the exposure of LDAP credentials or unintended synchronization operations.

Recommendations Update JumpServer to version 3.10.21-lts or later. Update JumpServer to version 4.10.12-lts or later.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2025-62795

GHSA-7893-256G-M822

Affected Products

Jumpserver

References · 7

• 🔥 https://github.com/jumpserver/jumpserver/security/advisories/GHSA-7893-256g-m822 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62795.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-62795 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62795 · Security Note
• https://twitter.com/VulmonFeeds/status/1983991299461075241 · Twitter Post
• https://twitter.com/CVEnew/status/1983945808300143019 · Twitter Post
• https://t.me/CVEtracker/36211 · Telegram Post