Vulnerabilities > Fit2Cloud > Jumpserver > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-10-31 CVE-2023-46138 Weak Password Recovery Mechanism for Forgotten Password vulnerability in Fit2Cloud Jumpserver
JumpServer is an open source bastion host and maintenance security audit system that complies with 4A specifications.
network
low complexity
fit2cloud CWE-640
5.3
2023-10-25 CVE-2023-46123 Improper Restriction of Excessive Authentication Attempts vulnerability in Fit2Cloud Jumpserver
jumpserver is an open source bastion machine, professional operation and maintenance security audit system that complies with 4A specifications.
network
low complexity
fit2cloud CWE-307
5.3
2023-09-15 CVE-2023-42442 Improper Authentication vulnerability in Fit2Cloud Jumpserver
JumpServer is an open source bastion host and a professional operation and maintenance security audit system.
network
low complexity
fit2cloud CWE-287
5.3