PT-2023-19093 · Beyondtrust · Beyondtrust Privileged Remote Access

Christian Feuchter · Published 2023-10-12 · Updated 2023-10-18 · CVE-2023-23632

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BeyondTrust Privileged Remote Access (PRA) versions 22.2.x through 22.4.x

Description The issue concerns a local authentication bypass in BeyondTrust Privileged Remote Access (PRA). Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions. This allows unauthorized access to jump items by guessing only the first character of the secret.

Recommendations For versions 22.2.x through 22.4.x, consider disabling the BYOT shell jump sessions as a temporary workaround until a patch is available. Restrict access to the jump items to minimize the risk of exploitation. Avoid using the flawed secret verification process in the BYOT shell jump sessions until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-23632

Affected Products

Beyondtrust Privileged Remote Access

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-23632 · Security Note
• https://osv.dev/vulnerability/CVE-2023-23632 · Vendor Advisory
• http://seclists.org/fulldisclosure/2025/May/1 · Note
• https://twitter.com/DMFezzaReedCISA/status/1712592451599302915 · Twitter Post
• https://twitter.com/CVEnew/status/1712562602016944496 · Twitter Post
• https://compass-security.com/fileadmin/Research/Advisories/2023_03_CSNC-2022-018_PRA_Privilege_Escalation.txt · Note
• https://t.me/cibsecurity/72201 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1712596674646888689 · Twitter Post