CVE-2023-43660

    Dashboard / Vulnerabilities / CVE-2023-43660

    CVE-2023-43660

    Published: 27 Sept 2023Last Modified: 12 Aug 2026

    Summary: SSH key password bypassed in warpgate

    Details: Warpgate is a smart SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. The SSH key verification for a user can be bypassed by sending an SSH key offer without a signature. This allows bypassing authentication under following conditions: 1. The attacker knows the username and a valid target name 2. The attacked knows the user's public key and 3. Only SSH public key authentication is required for the user account. This issue has been addressed in version 0.8.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

    References: https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/43xxx/CVE-2023-43660.json, https://github.com/warp-tech/warpgate/security/advisories/GHSA-3cjp-w4cp-m9c8, https://nvd.nist.gov/vuln/detail/CVE-2023-43660, https://github.com/warp-tech/warpgate/commit/a4df7f7a21395cfaee7a9789d1e3846290caeb63

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -8b91e4a328d54b30ce0b9b994c1eada833f886de

    Affected versions

    v0.8.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-43660 | CVE-DB