Advisories · Technology
warp-tech warpgate.
Every CVE that names warp-tech warpgate among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.7 Low
Warpgate: Kubernetes listener discloses internal error text to an unauthenticated caller
- warp-tech warpgate
- Information disclosure
- CVSS 6.8 Medium
Warpgate: Kubernetes authorization correlation can be reused by a recreated same-name account
- warp-tech warpgate
- Broken access control
- CVSS 6.0 Medium
Warpgate: Missing authorization check on `PUT /users/:id/roles/:role_id` allows any admin to bypass the `AccessRolesAssign` permission boundary
- warp-tech warpgate
- Broken access control
- CVSS 5.7 Medium
Warpgate: Web SSH stores a jump host's key against the target's address, so it validates as the target
- warp-tech warpgate
- Weak cryptography or TLS
- CWE-923
- CVSS 2.4 Low
Warpgate: Markup injection in SSO form_post return page via unencoded redirect/error values
- warp-tech warpgate
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Warpgate: API tokens bypass the user's allowed_ip_ranges restriction
- warp-tech warpgate
- Broken access control
- CVSS 7.7 High
Warpgate: Missing Admin Authorization on Live Recording Stream WebSocket Allows Any Authenticated User to Eavesdrop on Terminal Sessions
- warp-tech warpgate
- Broken access control
- CVSS 4.9 Medium
Warpgate: x-warpgate-username Header Not Stripped from Client Requests Enables Identity Spoofing to WebSocket Backend Targets
- warp-tech warpgate
- Authentication bypass
- CWE-116
- CVSS 9.3 CriticalCritical · CVSS 9+
Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter
- warp-tech warpgate
- Cross-site scripting (XSS)
- CVSS 5.8 Medium
Warpgate: SSO CSRF -- State Token Not Validated on Return
- warp-tech warpgate
- Cross-site request forgery (CSRF)
- CVSS 7.1 High
User authorization bug leading to privilege escalation in warpgate
- warp-tech warpgate
- Broken access control
- CVSS 4.8 Medium
SSH key password bypassed in warpgate
- warp-tech warpgate
- Authentication bypass
- CVSS 6.4 Medium
User login confusion with SSO in warpgate
- warp-tech warpgate
- Authentication bypass