Skip to content
OpenAdvisories
Medium · 5.9 CVE-2024-5813 EUVD-2024-46961GHSA-4p3j-h7w5-q76v

SSH Private Key Leak in BeyondInsight PasswordSafe

Published Jun 11, 2024 · Updated Aug 1, 2024 · Assigned by BT

Description

A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

Affected products

VendorProductAffectedFixed
BeyondTrust BeyondInsight PasswordSafe 23.3 – < 23.3.0.929 23.3.0.929

References