CVE-2025-62712 (CNNVD-202510-4209)
中文标题:
JumpServer 安全漏洞
英文标题:
JumpServer Connection Token Leak Vulnerability
漏洞描述
中文描述:
JumpServer是中国杭州飞致云信息科技（JumpServer）公司的一款开源堡垒机。 JumpServer v3.10.20-lts之前版本和v4.10.11-lts之前版本存在安全漏洞，该漏洞源于超级连接API端点未正确限制连接令牌访问，可能导致未经授权的访问和权限提升。
英文描述:
JumpServer is an open source bastion host and an operation and maintenance security audit system. In JumpServer versions prior to v3.10.20-lts and v4.10.11-lts, an authenticated, non-privileged user can retrieve connection tokens belonging to other users via the super-connection API endpoint (/api/v1/authentication/super-connection-token/). When accessed from a web browser, this endpoint returns connection tokens created by all users instead of restricting results to tokens owned by or authorized for the requester. An attacker who obtains these tokens can use them to initiate connections to managed assets on behalf of the original token owners, resulting in unauthorized access and privilege escalation across sensitive systems. This vulnerability is fixed in v3.10.20-lts and v4.10.11-lts.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| jumpserver | jumpserver | >= 4.0.0, < 4.10.11-lts | - | - |
cpe:2.3:a:jumpserver:jumpserver:>=_4.0.0,_<_4.10.11-lts:*:*:*:*:*:*:*
|
| jumpserver | jumpserver | < 3.10.20-lts | - | - |
cpe:2.3:a:jumpserver:jumpserver:<_3.10.20-lts:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
3.1 (cna)
CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-62712 |
2025-11-11 15:23:33 | 2025-11-11 07:40:49 |
| NVD | nvd_CVE-2025-62712 |
2025-11-11 15:01:07 | 2025-11-11 07:48:35 |
| CNNVD | cnnvd_CNNVD-202510-4209 |
2025-11-11 15:12:59 | 2025-11-11 08:00:20 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202510-4209
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- data_sources: ['cve'] -> ['cve', 'nvd']