Vulnerabilities > CVE-2023-46138 - Unspecified vulnerability in Fit2Cloud Jumpserver

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

fit2cloud

NVD

Published: 2023-10-31

Updated: 2024-11-21

Summary

JumpServer is an open source bastion host and maintenance security audit system that complies with 4A specifications. Prior to version 3.8.0, the default email for initial user admin is `admin[@]mycompany[.]com`, and users reset their passwords by sending an email. Currently, the domain `mycompany.com` has not been registered. However, if it is registered in the future, it may affect the password reset functionality. This issue has been patched in version 3.8.0 by changing the default email domain to `example.com`. Those who cannot upgrade may change the default email domain to `example.com` manually.

Vulnerable Configurations

Part	Description	Count
Application	Fit2Cloud Fit2Cloud Jumpserver - Fit2Cloud Jumpserver 0.1.0 Fit2Cloud Jumpserver 0.1.1 Fit2Cloud Jumpserver 0.2.0 Fit2Cloud Jumpserver 0.2.1 Fit2Cloud Jumpserver 0.3.1 Fit2Cloud Jumpserver 0.3.2 Fit2Cloud Jumpserver 0.3.3 Fit2Cloud Jumpserver 1.0.0 Fit2Cloud Jumpserver 1.1.0 Fit2Cloud Jumpserver 1.1.1 Fit2Cloud Jumpserver 1.2.0 Fit2Cloud Jumpserver 1.2.1 Fit2Cloud Jumpserver 1.3.0 Fit2Cloud Jumpserver 1.3.1 Fit2Cloud Jumpserver 1.3.2 Fit2Cloud Jumpserver 1.3.3 Fit2Cloud Jumpserver 1.4.0 Fit2Cloud Jumpserver 1.4.1 Fit2Cloud Jumpserver 1.4.2 Fit2Cloud Jumpserver 1.4.3 Fit2Cloud Jumpserver 1.4.4 Fit2Cloud Jumpserver 1.4.5 Fit2Cloud Jumpserver 1.4.6 Fit2Cloud Jumpserver 1.4.7 Fit2Cloud Jumpserver 1.4.8 Fit2Cloud Jumpserver 1.4.9 Fit2Cloud Jumpserver 1.4.10 Fit2Cloud Jumpserver 1.5.0 Fit2Cloud Jumpserver 1.5.1 Fit2Cloud Jumpserver 1.5.2 Fit2Cloud Jumpserver 1.5.3 Fit2Cloud Jumpserver 1.5.4 Fit2Cloud Jumpserver 1.5.5 Fit2Cloud Jumpserver 1.5.6 Fit2Cloud Jumpserver 1.5.7 Fit2Cloud Jumpserver 1.5.8 Fit2Cloud Jumpserver 1.5.9 Fit2Cloud Jumpserver 2.0.0 Fit2Cloud Jumpserver 2.0.1 Fit2Cloud Jumpserver 2.0.2 Fit2Cloud Jumpserver 2.1.0 Fit2Cloud Jumpserver 2.1.1 Fit2Cloud Jumpserver 2.1.2 Fit2Cloud Jumpserver 2.2.0 Fit2Cloud Jumpserver 2.2.1 Fit2Cloud Jumpserver 2.2.2 Fit2Cloud Jumpserver 2.2.3 Fit2Cloud Jumpserver 2.3.0 Fit2Cloud Jumpserver 2.3.1 Fit2Cloud Jumpserver 2.3.2 Fit2Cloud Jumpserver 2.3.3 Fit2Cloud Jumpserver 2.4.0 Fit2Cloud Jumpserver 2.4.1 Fit2Cloud Jumpserver 2.4.2 Fit2Cloud Jumpserver 2.4.3 Fit2Cloud Jumpserver 2.4.4 Fit2Cloud Jumpserver 2.4.5 Fit2Cloud Jumpserver 2.5.0 Fit2Cloud Jumpserver 2.5.1 Fit2Cloud Jumpserver 2.5.2 Fit2Cloud Jumpserver 2.5.3 Fit2Cloud Jumpserver 2.5.4 Fit2Cloud Jumpserver 2.6.0 Fit2Cloud Jumpserver 2.6.1 Fit2Cloud Jumpserver 2.6.2 Fit2Cloud Jumpserver 2.7.0 Fit2Cloud Jumpserver 2.7.1 Fit2Cloud Jumpserver 2.7.2 Fit2Cloud Jumpserver 2.7.3 Fit2Cloud Jumpserver 2.8.0 Fit2Cloud Jumpserver 2.8.1 Fit2Cloud Jumpserver 2.8.2 Fit2Cloud Jumpserver 2.8.3 Fit2Cloud Jumpserver 2.8.4 Fit2Cloud Jumpserver 2.9.0 Fit2Cloud Jumpserver 2.9.1 Fit2Cloud Jumpserver 2.9.2 Fit2Cloud Jumpserver 2.10.0 Fit2Cloud Jumpserver 2.10.1 Fit2Cloud Jumpserver 2.10.2 Fit2Cloud Jumpserver 2.10.3 Fit2Cloud Jumpserver 2.10.4 Fit2Cloud Jumpserver 2.10.5 Fit2Cloud Jumpserver 2.11.0 Fit2Cloud Jumpserver 2.11.1 Fit2Cloud Jumpserver 2.11.2 Fit2Cloud Jumpserver 2.11.3 Fit2Cloud Jumpserver 2.11.4 Fit2Cloud Jumpserver 2.12.0 Fit2Cloud Jumpserver 2.12.1 Fit2Cloud Jumpserver 2.12.2 Fit2Cloud Jumpserver 2.13.0 Fit2Cloud Jumpserver 2.13.1 Fit2Cloud Jumpserver 2.13.2 Fit2Cloud Jumpserver 2.14.0 Fit2Cloud Jumpserver 2.14.1 Fit2Cloud Jumpserver 2.14.2 Fit2Cloud Jumpserver 2.15.0 Fit2Cloud Jumpserver 2.15.1 Fit2Cloud Jumpserver 2.15.2 Fit2Cloud Jumpserver 2.15.3 Fit2Cloud Jumpserver 2.15.4 Fit2Cloud Jumpserver 2.15.5 Fit2Cloud Jumpserver 2.16.0 Fit2Cloud Jumpserver 2.16.1 Fit2Cloud Jumpserver 2.16.2 Fit2Cloud Jumpserver 2.16.3 Fit2Cloud Jumpserver 2.17.0 Fit2Cloud Jumpserver 2.17.1 Fit2Cloud Jumpserver 2.17.2 Fit2Cloud Jumpserver 2.17.3 Fit2Cloud Jumpserver 2.17.4 Fit2Cloud Jumpserver 2.17.5 Fit2Cloud Jumpserver 2.18.0 Fit2Cloud Jumpserver 2.18.1 Fit2Cloud Jumpserver 2.18.2 Fit2Cloud Jumpserver 2.18.3 Fit2Cloud Jumpserver 2.19.0 Fit2Cloud Jumpserver 2.19.1 Fit2Cloud Jumpserver 2.19.2 Fit2Cloud Jumpserver 2.20.0 Fit2Cloud Jumpserver 2.20.1 Fit2Cloud Jumpserver 2.20.2 Fit2Cloud Jumpserver 2.20.3 Fit2Cloud Jumpserver 2.21.0 Fit2Cloud Jumpserver 2.21.1 Fit2Cloud Jumpserver 2.21.2 Fit2Cloud Jumpserver 2.21.3 Fit2Cloud Jumpserver 2.21.4 Fit2Cloud Jumpserver 2.22.0 Fit2Cloud Jumpserver 2.22.1 Fit2Cloud Jumpserver 2.22.2 Fit2Cloud Jumpserver 2.22.3 Fit2Cloud Jumpserver 2.22.4 Fit2Cloud Jumpserver 2.23.0 Fit2Cloud Jumpserver 2.23.1 Fit2Cloud Jumpserver 2.23.2 Fit2Cloud Jumpserver 2.23.3 Fit2Cloud Jumpserver 2.23.4 Fit2Cloud Jumpserver 2.24.0 Fit2Cloud Jumpserver 2.24.1 Fit2Cloud Jumpserver 2.24.2 Fit2Cloud Jumpserver 2.25.0 Fit2Cloud Jumpserver 2.25.1 Fit2Cloud Jumpserver 2.25.2 Fit2Cloud Jumpserver 2.25.3 Fit2Cloud Jumpserver 2.25.4 Fit2Cloud Jumpserver 2.25.5 Fit2Cloud Jumpserver 2.26.0 Fit2Cloud Jumpserver 2.26.1 Fit2Cloud Jumpserver 2.27.0 Fit2Cloud Jumpserver 2.28.0 Fit2Cloud Jumpserver 2.28.1 Fit2Cloud Jumpserver 2.28.2 Fit2Cloud Jumpserver 2.28.3 Fit2Cloud Jumpserver 2.28.4 Fit2Cloud Jumpserver 2.28.5 Fit2Cloud Jumpserver 2.28.6 Fit2Cloud Jumpserver 2.28.7 Fit2Cloud Jumpserver 2.28.8 Fit2Cloud Jumpserver 2.28.9 Fit2Cloud Jumpserver 2.28.10 Fit2Cloud Jumpserver 2.28.18 Fit2Cloud Jumpserver 2.28.19 Fit2Cloud Jumpserver 2.28.20 Fit2Cloud Jumpserver 3.0.0 Fit2Cloud Jumpserver 3.0.1 Fit2Cloud Jumpserver 3.0.2 Fit2Cloud Jumpserver 3.0.3 Fit2Cloud Jumpserver 3.0.4 Fit2Cloud Jumpserver 3.1.0 Fit2Cloud Jumpserver 3.1.1 Fit2Cloud Jumpserver 3.1.2 Fit2Cloud Jumpserver 3.2.0 Fit2Cloud Jumpserver 3.2.1 Fit2Cloud Jumpserver 3.2.2 Fit2Cloud Jumpserver 3.3.0 Fit2Cloud Jumpserver 3.3.1 Fit2Cloud Jumpserver 3.4.0 Fit2Cloud Jumpserver 3.4.1 Fit2Cloud Jumpserver 3.4.2 Fit2Cloud Jumpserver 3.4.3 Fit2Cloud Jumpserver 3.5.0 Fit2Cloud Jumpserver 3.5.1 Fit2Cloud Jumpserver 3.5.2 Fit2Cloud Jumpserver 3.5.3 Fit2Cloud Jumpserver 3.5.4 Fit2Cloud Jumpserver 3.5.5 Fit2Cloud Jumpserver 3.5.6 Fit2Cloud Jumpserver 3.5.7 Fit2Cloud Jumpserver 3.6.0 Fit2Cloud Jumpserver 3.6.1 Fit2Cloud Jumpserver 3.6.2 Fit2Cloud Jumpserver 3.6.3 Fit2Cloud Jumpserver 3.6.4 Fit2Cloud Jumpserver 3.6.5 Fit2Cloud Jumpserver 3.6.6 Fit2Cloud Jumpserver 3.7.1 Fit2Cloud Jumpserver 3.7.2	200

Summary

Vulnerable Configurations

References