CVE-2023-23632: High severity beyondtrust privileged remote access vulnerability
BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass. Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions, allowing unauthorized access to jump items by guessing only the first character of the secret.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this BeyondTrust Privileged Remote Access vulnerability?
The vulnerability ID for this BeyondTrust Privileged Remote Access vulnerability is CVE-2023-23632.
What is the severity of CVE-2023-23632?
The severity of CVE-2023-23632 is high (7.8).
Which versions of BeyondTrust Privileged Remote Access are affected by this vulnerability?
BeyondTrust Privileged Remote Access versions 22.2.x to 22.4.x are affected by this vulnerability.
How does this vulnerability in BeyondTrust Privileged Remote Access allow unauthorized access?
This vulnerability in BeyondTrust Privileged Remote Access allows unauthorized access by exploiting a flawed secret verification process in the BYOT shell jump sessions.
Is there a fix available for CVE-2023-23632?
Yes, it is recommended to update to a version of BeyondTrust Privileged Remote Access that is not affected by this vulnerability.