PatchTheCVEbastion vulnerabilities and fixes
Recent CVEs affecting bastion, with upgrade or downgrade steps. 2 tracked.
bastion has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-01-08. Highest priority: CVE-2023-46319 (score 43/100).
- CVE-2023-49961 HIGH 7.5 UPGRADE UPGRADE WALLIX Bastion 7.x, 8.x, 9.x and 10.x and WALLIX Access Manager 3.x and 4.x have Incorrect Access Control whic
- CVE-2023-46319 HIGH 7.5 UPGRADE WALLIX Bastion 9.x before 9.0.9 and 10.x before 10.0.5 allows unauthenticated access to sensitive information
FAQ
How do I fix bastion vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bastion being exploited right now?
None of the tracked bastion CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bastion CVE should I patch first?
CVE-2023-46319 currently ranks highest (43/100): WALLIX Bastion 9.x before 9.0.9 and 10.x before 10.0.5 allows unauthenticated access to sensitive information .