Skip to main content
0-Doubt
NewsInvestorsQuestionnairesDeveloperHelp
AnonymousSign in
0-Doubt — neutral IT/Security research
BrowseResellersCertified analystsRFI/RFP questionnairesHow trust worksHelp & FAQAPI
  1. Home/
  2. Teleport/
  3. Teleport Identity Governance

Teleport Identity Governance

GovernanceAI-generated from public sourcesAuto-generated by 0-Doubt from public vendor materials. Not verified by the vendor or an analyst. Check the freshness indicator.Lowest independence — unverified. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 0/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 10 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~46 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

Access control and policy across infrastructure with audit capabilities.

by Teleport · goteleport.com · source ↗

Known CVEs (10)About this listSourced from the public NVD database, matched by vendor name. Shown here at the vendor level — we don't track per-product/version data, so a listed CVE may affect a different product from this vendor, not necessarily this one. “New” means published within the last 30 days. “Actively exploited” means CISA's Known Exploited Vulnerabilities (KEV) catalog confirms real-world exploitation, not just a theoretical severity score.

RSS ⇢
  • CVE-2025-49825 ↗CRITICAL 9.82025

    Teleport provides connectivity, authentication, access controls and audit for infrastructure. Community Edition versions before and including 17.5.1 are vulnerable to remote authentication bypass. At …

  • CVE-2025-28855 ↗HIGH 7.12025

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in srcoley Teleport teleport allows Reflected XSS.This issue affects Teleport: from n/a through <= 1.…

  • CVE-2021-43819 ↗HIGH 7.52023

    Stargate-Bukkit is a mod for the minecraft video game which adds a portal focused environment. In affected versions Minecarts with chests will drop their items when teleporting through a portal; when …

  • CVE-2022-38599 ↗MEDIUM 6.52022

    Teleport v3.2.2, Teleport v3.5.6-rc6, and Teleport v3.6.3-b2 was discovered to contain an information leak via the /user/get-role-list web interface.

  • CVE-2022-36633 ↗HIGH 8.82022

    Teleport 9.3.6 is vulnerable to Command injection leading to Remote Code Execution. An attacker can craft a malicious ssh agent installation link by URL encoding a bash escape with carriage return lin…

  • CVE-2021-41395 ↗MEDIUM 6.52021

    Teleport before 6.2.12 and 7.x before 7.1.1 allows attackers to control a database connection string, in some situations, via a crafted database name or username.

  • CVE-2021-41394 ↗MEDIUM 5.32021

    Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows alteration of build artifacts in some situations.

  • CVE-2021-41393 ↗CRITICAL 9.82021

    Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12, and 7.x before 7.1.1 allows forgery of SSH host certificates in some situations.

  • CVE-2018-19555 ↗HIGH 8.82018

    tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password.

  • CVE-2018-19301 ↗MEDIUM 6.12018

    tp4a TELEPORT 3.1.0 allows XSS via the login page because a crafted username is mishandled when an administrator later views the system log.

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Secure Access Service Edge (SASE/SSE) products

see all →
  • 1Password Device Trust · 1Password
  • AWS Verified Access · Amazon Web Services, Inc.
  • Absolute Core · Absolute
  • Absolute Resilient, AI-powered SSE · Absolute
  • Agilicus · Agilicus
  • Akamai Enterprise Application Access · Akamai
  • Akamai Secure Internet Access Enterprise · Akamai
  • Alibaba Cloud Secure Access Service Edge · Alibaba Cloud