https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T13:21:52.216677+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-37268 CVE-2023-37268 — User login confusion with SSO in warpgate 2026-10-09T13:21:52.233040+00:00

Affected: warp-tech warpgate, warpgate_project warpgate

Warpgate is an SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. When logging in as a user with SSO enabled an attacker may authenticate as an other user. Any user account which does not have a second factor enabled could be compromised. This issue has been addressed in commit `8173f6512a` and in releases starting with version 0.7.3. Users are advised to upgrade. Users unable to upgrade should require their users to use a second factor in authentication.