Lucene search
13061848-ea10-403d-bd75-c83a022c2891NVD:CVE-2024-5813HistoryJun 11, 2024 - 4:15 p.m.
CVE-2024-5813
2024-06-1116:15:29
CWE-200
13061848-ea10-403d-bd75-c83a022c2891
web.nvd.nist.gov
2
vulnerability
bips
authenticated
attacker
ssh
private keys
information leak
server response
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
0.0004 Low
EPSS
Percentile
9.1%
A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.
Related
cve
cve
CVE-2024-5813
2024-06-11 16:15:29
vulnrichment
vulnrichment
CVE-2024-5813 SSH Private Key Leak in BeyondInsight PasswordSafe
2024-06-11 15:34:57
cvelist
cvelist
CVE-2024-5813 SSH Private Key Leak in BeyondInsight PasswordSafe
2024-06-11 15:34:57
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2024-5813