PT-2023-28697 · Beyondtrust · Beyondtrust Privileged Remote Access+1

Publicado 2023-09-05 · Atualizado 2023-09-11 · CVE-2023-4310

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 through 23.2.2

Description The issue is a command injection vulnerability that can be exploited through a malicious HTTP request, allowing an unauthenticated remote attacker to execute underlying operating system commands within the context of the site user.

Recommendations For versions 23.2.1 and 23.2.2, update to version 23.2.3 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable HTTP endpoint until a patch is available. Avoid using the vulnerable functionality in the affected versions until the issue is resolved.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2023-4310

Produtos afetados

Beyondtrust Privileged Remote Access

Beyondtrust Remote Support

Referências · 7

• https://t.me/cibsecurity/69907 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-4310 · Aviso do Fabricante
• https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0020207 · Nota
• https://beyondtrust.com/blog/entry/security-update-for-remote-support-and-privileged-remote-access · Nota
• https://twitter.com/VulmonFeeds/status/1699192634684624900 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1699157167511592999 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-4310 · Nota de Segurança