Description
Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows forgery of SSH host certificates in some situations.
References (4)
Core 4
Core References
Patch, Third Party Advisory x_refsource_misc
https://github.com/gravitational/teleport/releases/tag/v4.4.11
Patch, Third Party Advisory x_refsource_misc
https://github.com/gravitational/teleport/releases/tag/v5.2.4
Patch, Third Party Advisory x_refsource_misc
https://github.com/gravitational/teleport/releases/tag/v6.2.12
Patch, Third Party Advisory x_refsource_misc
https://github.com/gravitational/teleport/releases/tag/v7.1.1
Scores
CVSS v3
9.8
EPSS
0.0103
EPSS Percentile
59.3%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
Status
published
Products (1)
goteleport/teleport
< 4.4.11
Published
Sep 18, 2021
Tracked Since
Feb 18, 2026