Vulnerability · Published Mar 29, 2024 · Assigned by GitHub_M

CVE-2024-29024JumpServer Direct Object Reference (IDOR) Vulnerability in File Manager Bulk Transfer Functionality

Medium 4.6

In plain English

A medium-severity authorization bypass via user-controlled key in jumpserver from jumpserver. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 3.1)4.6Medium

Exploit odds (30 days)0.2%top 85.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

JumpServer is an open source bastion host and an operation and maintenance security audit system. An authenticated user can exploit the Insecure Direct Object Reference (IDOR) vulnerability in the file manager's bulk transfer by manipulating job IDs to upload malicious files, potentially compromising the integrity and security of the system. This vulnerability is fixed in v3.10.6.

Affected products (as reported)

Vendor	Product	Versions
jumpserver	jumpserver	>= 3.0.0, <= 3.10.5

Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

References

https://github.com/jumpserver/jumpserver/security/advisories/GHSA-8wqm-rfc7-q27q x_refsource_CONFIRM