Do Son Learn about CVE-2025-27095, a JumpServer vulnerability that exposes Kubernetes clusters to token leakage risks.
JumpServer
The vulnerabilities, identified as CVE-2024-40628 and CVE-2024-40629, both carry a CVSS score of 10, the highest possible severity rating
JumpServer has recently been found to contain CVE-2024-29201 and CVE-2024-29202 that could allow attackers to execute arbitrary code remotely
If an attacker is able to exploit the CVE-2023-42442 vulnerability, they could download session replays that contain sensitive information