Description
A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only smart rules via a specially crafted API request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BeyondTrust | BeyondInsight PasswordSafe | 24.1.0 – < 24.1.1, 23.3.0 – < 23.3.0.959, 23.2.0 – < 23.2.0.1293 | 24.1.1 |