CVE-2023-37268 - CVE House
Back to Database
Status published Medium CVE-2023-37268

User login confusion with SSO in warpgate

Vulnerability Description

Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. When logging in as a user with SSO enabled an attacker may authenticate as an other user. Any user account which does not have a second factor enabled could be compromised. This issue has been addressed in commit `8173f6512a` and in releases starting with version 0.7.3. Users are advised to upgrade. Users unable to upgrade should require their users to use a second factor in authentication.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-37268

Credits & Attribution

No credits recorded in the NVD database.

References

More from warp-tech

View All →
CVE-2023-48712
User authorization bug leading to privilege escalation in warpgate
High 7.1
CVE-2023-43660
SSH key password bypassed in warpgate
Medium 4.8
CVE-2023-28113
russh may use insecure Diffie-Hellman keys
Medium 5.9

Affected Vendor

Affected Software

warpgate
Vulnerable Versions:
< 0.7.3

Timeline

Official Publish: July 14th, 2023
Last Modified: October 18th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-287

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1556 Modify Authentication Process
Credential Access