CVE-2022-38599 - Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user/get-role-list web interface

MEDIUM

Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user/get-role-list web interface

Published Dec 8, 2022

6.5

MEDIUM

CVSS 3.1

EPSS 0.84%

Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user/get-role-list web interface.

No remediation recorded yet.

Weaknesses (1)

CWE-668

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-41176		Advisory
https://gist.github.com/arleyna/20d858e11c48984d00926fa8cc0c2722		ExploitThird Party Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Dec 8, 2022

Updated Jul 9, 2026

Reserved Aug 22, 2022

Updated Apr 23, 2025

Status Modified

Modified Jul 9, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Dec 8, 2022

Updated Jul 9, 2026

Exploited since n/a