CVE-2023-48712: User authorization bug leading to privilege escalation in warpgate
Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. In affected versions there is a privilege escalation vulnerability through a non-admin user's account. Limited users can impersonate another user's account if only single-factor authentication is configured. If a user knows an admin username, opens the login screen and attempts to authenticate with an incorrect password they can subsequently enter a valid non-admin username and password they will be logged in as the admin user. All installations prior to version 0.9.0 are affected. All users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-48712?
CVE-2023-48712 is a vulnerability in Warpgate that allows a limited user to impersonate another user's account if only single-factor authentication is configured.
How severe is CVE-2023-48712?
CVE-2023-48712 has a severity rating of 8.8 (high).
How does CVE-2023-48712 affect Warpgate?
CVE-2023-48712 affects versions up to and including 0.8.1 of Warpgate.
How can I fix CVE-2023-48712?
To fix CVE-2023-48712, users should update to a version of Warpgate that is not affected by the vulnerability.
Where can I find more information about CVE-2023-48712?
More information about CVE-2023-48712 can be found in the official Warpgate Project GitHub repository.