Lucene search
PRIOn knowledge basePRION:CVE-2023-23632HistoryOct 12, 2023 - 8:15 p.m.
Authentication flaw
2023-10-1220:15:00
PRIOn knowledge base
www.prio-n.com
10
beyondtrust
pra
authentication
flaw
vulnerable
local
bypass
secret
verification
process
byot
shell
jump
sessions
unauthorized
access
guessing
BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass. Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions, allowing unauthorized access to jump items by guessing only the first character of the secret.
| CPE | Name | Operator | Version |
|---|---|---|---|
| privileged_remote_access | ge | 22.2.1 | |
| privileged_remote_access | lt | 22.3.3 |
Related
cve
cve
CVE-2023-23632
2023-10-12 20:15:12
cvelist
cvelist
CVE-2023-23632
2023-10-12 00:00:00
nvd
nvd
CVE-2023-23632
2023-10-12 20:15:12