CVE-2023-23632

2023-10-1200:00:00

mitre

www.cve.org

beyondtrust

pra

authentication bypass

vulnerability

version 22.2.x

version 22.4.x

local access

secret verification

byot shell

jump items

unauthorized access

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass. Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions, allowing unauthorized access to jump items by guessing only the first character of the secret.