'; } else{ echo ''; } echo '
|
|||
Rule General Information |
---|
Release Date: | 2025-07-30 | |
Rule Name: | Teleport Bastion Host Authentication Bypass Vulnerability | |
Severity: | ||
CVE ID: | ||
Rule Protection Details |
---|
Description: | Teleport is a lightweight open-source bastion machine that supports RDP, SSH, SFTP, Telnet unified access, provides single sign on, on-demand authorization, and full process operation auditing, making remote operation and maintenance secure and worry free. The Teleport bastion host has a permission authentication bypass vulnerability, which can be exploited by attackers to bypass password authentication and gain bastion host management privileges. | |
Impact: | An unauthorized remote attacker can bypass authentication and gain access to the application with specially crafted requests. | |
Affected OS: | Windows, Linux, Others | |
Reference: | ||
Solutions |
---|
Please contact the software vendor to update the software patch. |