fkie_cve-2025-59339
Vulnerability from fkie_nvd
Published
2025-09-17 18:15
Modified
2025-09-18 13:43
Severity ?
4.4 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Summary
The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. Session-recording ttyrec files, may be handled by the provided osh-encrypt-rsync script that is a helper to rotate, encrypt, sign, copy, and optionally move them to a remote storage periodically, if configured to. When running, the script properly rotates and encrypts the files using the provided GPG key(s), but silently fails to sign them, even if asked to.
References
security-advisories@github.comhttps://github.com/ovh/the-bastion/commit/9bc85ec3f4b724f903773ba64909777c4826a13f
security-advisories@github.comhttps://github.com/ovh/the-bastion/security/advisories/GHSA-h66q-g57p-rgg6
Impacted products
Vendor Product Version


To clipboard 

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Bastion provides authentication, authorization, traceability and auditability for SSH accesses. Session-recording ttyrec files, may be handled by the provided osh-encrypt-rsync script that is a helper to rotate, encrypt, sign, copy, and optionally move them to a remote storage periodically, if configured to. When running, the script properly rotates and encrypts the files using the provided GPG key(s), but silently fails to sign them, even if asked to."
    },
    {
      "lang": "es",
      "value": "El Basti\u00f3n proporciona autenticaci\u00f3n, autorizaci\u00f3n, trazabilidad y auditabilidad para los accesos SSH. Los archivos ttyrec de grabaci\u00f3n de sesi\u00f3n pueden ser gestionados por el script osh-encrypt-rsync proporcionado, que es una herramienta de ayuda para rotarlos, cifrarlos, firmarlos, copiarlos y, opcionalmente, moverlos a un almacenamiento remoto peri\u00f3dicamente, si est\u00e1 configurado para ello. Cuando se ejecuta, el script rota y cifra correctamente los archivos utilizando la(s) clave(s) GPG proporcionada(s), pero falla silenciosamente al firmarlos, incluso si se le solicita."
    }
  ],
  "id": "CVE-2025-59339",
  "lastModified": "2025-09-18T13:43:34.310",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "NONE",
          "baseScore": 4.4,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 3.6,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-09-17T18:15:53.230",
  "references": [
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/ovh/the-bastion/commit/9bc85ec3f4b724f903773ba64909777c4826a13f"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/ovh/the-bastion/security/advisories/GHSA-h66q-g57p-rgg6"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-325"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.