CVE-2023-48712

Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. In affected versions there is a privilege escalation vulnerability through a non-admin user's account. Limited users can impersonate another user's account if only single-factor authentication is configured. If a user knows an admin username, opens the login screen and attempts to authenticate with an incorrect password they can subsequently enter a valid non-admin username and password they will be logged in as the admin user. All installations prior to version 0.9.0 are affected. All users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-863

• https://github.com/warp-tech/warpgate/commit/e3b26b2699257b9482dce2e9157bd9b5e05d9c76Patch
• https://github.com/warp-tech/warpgate/security/advisories/GHSA-c94j-vqr5-3mxrVendor Advisory
• https://github.com/warp-tech/warpgate/commit/e3b26b2699257b9482dce2e9157bd9b5e05d9c76Patch
• https://github.com/warp-tech/warpgate/security/advisories/GHSA-c94j-vqr5-3mxrVendor Advisory

Published

Nov 24, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-48707CodeIgniter Shield is an authentication and authorization pr…6.5
• CVE-2023-48708CodeIgniter Shield is an authentication and authorization pr…6.5
• CVE-2023-48709iTop is an IT service management platform. When exporting d…8
• CVE-2023-4871A vulnerability classified as critical was found in SourceCo…9.8
• CVE-2023-48710iTop is an IT service management platform. Files from the `…9.8
• CVE-2023-48711google-translate-api-browser is an npm package which interfa…3.7
• CVE-2023-48713Knative Serving builds on Kubernetes to support deploying an…5.3
• CVE-2023-48714Silverstripe Framework is the framework that forms the base …4.3
• CVE-2023-48715Tuleap is an open source suite to improve management of soft…5.4
• CVE-2023-48716Student Result Management System v1.0 is vulnerable to multi…9.8
• CVE-2023-48717Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-48718Student Result Management System v1.0 is vulnerable to multi…9.8