CVE-2023-42442

JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session replays stored in S3, OSS, or other cloud storage are not affected. The api `/api/v1/terminal/sessions/` permission control is broken and can be accessed anonymously. SessionViewSet permission classes set to `[RBACPermission | IsSessionAssignee]`, relation is or, so any permission matched will be allowed. Versions 3.5.5 and 3.6.4 have a fix. After upgrading, visit the api `$HOST/api/v1/terminal/sessions/?limit=1`. The expected http response code is 401 (`not_authenticated`).

• CWE-287
• CWE-287

• https://github.com/jumpserver/jumpserver/blob/v3.6.1/apps/terminal/api/session/session.py#L91Product
• https://github.com/jumpserver/jumpserver/commit/0a58bba59cd275bab8e0ae58bf4b359fbc5eb74aPatch
• https://github.com/jumpserver/jumpserver/security/advisories/GHSA-633x-3f4f-v9rwExploit, Vendor Advisory
• https://github.com/jumpserver/jumpserver/blob/v3.6.1/apps/terminal/api/session/session.py#L91Product
• https://github.com/jumpserver/jumpserver/commit/0a58bba59cd275bab8e0ae58bf4b359fbc5eb74aPatch
• https://github.com/jumpserver/jumpserver/security/advisories/GHSA-633x-3f4f-v9rwExploit, Vendor Advisory

Published

Sep 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-42436Stored cross-site scripting vulnerability exists in the pres…5.4
• CVE-2023-42437Rejected reason: This is unused.
• CVE-2023-42438An inconsistent user interface issue was addressed with impr…4.3
• CVE-2023-42439GeoNode is an open source platform that facilitates the crea…6.5
• CVE-2023-4244A use-after-free vulnerability in the Linux kernel's netfilt…7
• CVE-2023-42441Vyper is a Pythonic Smart Contract Language for the Ethereum…5.3
• CVE-2023-42443Vyper is a Pythonic Smart Contract Language for the Ethereum…8.1
• CVE-2023-42444phonenumber is a library for parsing, formatting and validat…7.5
• CVE-2023-42445Gradle is a build tool with a focus on build automation and …5.3
• CVE-2023-42446Pow is a authentication and user management solution for Pho…6.5
• CVE-2023-42447blurhash-rs is a pure Rust implementation of Blurhash, softw…7.5
• CVE-2023-42448Hydra is the layer-two scalability solution for Cardano. Pri…8.1