CVE-2024-29020 MEDIUM

CVE-2024-29020: JumpServer allows nn authorized attacker to get sensitive information in playbook files when playbook_id is leaked

Vendor Jumpserver

Product jumpserver

Weakness CWE-639 · IDOR

Published March 29, 2024

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

4.6/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction Required

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

JumpServer is an open source bastion host and an operation and maintenance security audit system. An authorized attacker can obtain sensitive information contained within playbook files if they manage to learn the playbook_id of another user. This breach of confidentiality can lead to information disclosure and exposing sensitive data. This vulnerability is fixed in v3.10.6.

Key dates

02Disclosure timeline

March 29, 2024 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-29020 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/639.html

Related vulnerabilities

04Related CVE

CVE-2023-6929 Authorization Bypass Through User-Controlled Key in EuroTel ETL3100 CVE-2026-3453 ProfilePress <= 4.16.11 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Subscription Cancellation/Expiration CVE-2026-43890 Outline: IDOR in subscriptions.create allows cross-tenant subscription on private documents (sibling of GHSA-23jj-rp48-w7q7) CVE-2024-4538 IDOR vulnerability in Janto Ticketing Software CVE-2025-8532 IDOR in Bimser's eBA Document and Workflow Management System