7.8
CVE-2023-23632
- EPSS 0.01%
- Veröffentlicht 12.10.2023 20:15:12
- Zuletzt bearbeitet 21.11.2024 07:46:34
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass. Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions, allowing unauthorized access to jump items by guessing only the first character of the secret.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Beyondtrust ≫ Privileged Remote Access Version >= 22.2.1 < 22.3.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.01% | 0.009 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.