Secrets Disclosure Vulnerability in JumpServer PAM Tool

CVE-2024-40628

What is CVE-2024-40628?

JumpServer, a widely used open-source Privileged Access Management platform, is susceptible to a vulnerability that allows attackers to exploit the ansible playbook. This exploitation enables unauthorized access to arbitrary files within the celery container, which operates with root privileges and has direct database access. Consequently, this can lead to severe consequences, such as the theft of confidential information, the creation of unauthorized administrator accounts, and potential manipulation of the database itself. To mitigate this risk, users are strongly encouraged to upgrade to the patched versions 3.10.12 or 4.0.0, as no workarounds are currently available.

References