PT-2023-19093 · Beyondtrust · Beyondtrust Privileged Remote Access

Christian Feuchter · Publicado 2023-10-12 · Atualizado 2023-10-18 · CVE-2023-23632

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BeyondTrust Privileged Remote Access (PRA) versions 22.2.x through 22.4.x

Description The issue concerns a local authentication bypass in BeyondTrust Privileged Remote Access (PRA). Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions. This allows unauthorized access to jump items by guessing only the first character of the secret.

Recommendations For versions 22.2.x through 22.4.x, consider disabling the BYOT shell jump sessions as a temporary workaround until a patch is available. Restrict access to the jump items to minimize the risk of exploitation. Avoid using the flawed secret verification process in the BYOT shell jump sessions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2023-23632

Produtos afetados

Beyondtrust Privileged Remote Access

Referências · 8

• http://seclists.org/fulldisclosure/2025/May/1 · Nota
• https://twitter.com/DMFezzaReedCISA/status/1712592451599302915 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1712562602016944496 · Publicação no Twitter
• https://compass-security.com/fileadmin/Research/Advisories/2023_03_CSNC-2022-018_PRA_Privilege_Escalation.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-23632 · Nota de Segurança
• https://t.me/cibsecurity/72201 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-23632 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1712596674646888689 · Publicação no Twitter