Description
Prior to 23.1, an information disclosure vulnerability exists within BeyondInsight which can allow an attacker to enumerate usernames.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BeyondTrust | BeyondInsight | < 23.1 | 23.1 |
Medium · 4.3
CVE-2024-4220
EUVD-2024-32772GHSA-9fr6-vrhc-9hmv
Information Disclosure in BeyondInsight
Published Jun 4, 2024 · Updated Aug 1, 2024 · Assigned by BT