critical9.8
CVE-2021-3169
An issue in Jumpserver before 2.6.2, before 2.5.4, before 2.4.5 allows attackers to create a connection token through an API which does not have access control…
Impact
An issue in Jumpserver before 2.6.2, before 2.5.4, before 2.4.5 allows attackers to create a connection token through an API which does not have access control and use it to access sensitive assets.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jumpserver | Jumpserver | from 2.4.0 before 2.4.5 from 2.5.0 before 2.5.4 from 2.6.0 before 2.6.2 |