CVE-2021-41395

Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2021-09-18

Last modified

2024-08-04

Affected products

• Teleport (Goteleport)

References

• https://github.com/gravitational/teleport/releases/tag/v6.2.12
• https://github.com/gravitational/teleport/releases/tag/v7.1.1