writeups.xyz / Jumpserver Preauth RCE Exploit Chain

Submitter : c2a

Date: 31 January 2024

Bounty : undisclosed

Vulnerabilities :

• RCE
• Password Reset
• Authentication Bypass
• Path Traversal
• Cryptographic Issues
• Security Code Review

Programs :

• JumpServer

Authors :

• Zhiniang Peng (@Edwardzpeng)

Link :
https://sites.google.com/site/zhiniangpeng/blogs/Jumpserver