CVE-2024-5813: SSH Private Key Leak in BeyondInsight PasswordSafe
Published Jun 11, 2024
·Updated
A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.
Affected Software
2 affected components
BeyondTrust Beyondinsight Password Safe>=23.3<23.3.0.929
BIPS BeyondInsight PasswordSafe
Event History
Jun 11, 2024
CVE Published
via MITRE·03:34 PM
Data Sourced
via MITRE·03:34 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-5813?
CVE-2024-5813 is classified as a medium severity vulnerability.
2
How do I fix CVE-2024-5813?
To fix CVE-2024-5813, update BIPS to the latest version beyond 23.3.0.929.
3
Who is affected by CVE-2024-5813?
CVE-2024-5813 affects users of BeyondTrust BeyondInsight Password Safe versions from 23.3.0.929 and below.
4
What type of attacker can exploit CVE-2024-5813?
An authenticated attacker with high privileges can exploit CVE-2024-5813.
5
What is the risk associated with CVE-2024-5813?
The risk associated with CVE-2024-5813 is that it allows access to SSH private keys through information leakage.