CVE-2023-23632

2023-10-1200:00:00

mitre

github.com

beyondtrust pra

vulnerability

local authentication bypass

byot shell jump sessions

unauthorized access

AI Score

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass. Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions, allowing unauthorized access to jump items by guessing only the first character of the secret.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*"
    ],
    "vendor": "beyondtrust",
    "product": "privileged_remote_access",
    "versions": [
      {
        "status": "affected",
        "version": "22.2x",
        "versionType": "custom",
        "lessThanOrEqual": "22.4x"
      }
    ],
    "defaultStatus": "unknown"
  }
]