Description
BeyondTrust Privileged Remote Access (PRA) versions prior to 25.1 are vulnerable to a local authentication bypass. A local authenticated attacker can view the connection details of a ShellJump session that was initiated with external tools, allowing unauthorized access to connected sessions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BeyondTrust | Privileged Remote Access | < 25.1.1 | 25.1.1 |
Advisories 1
- WID-SEC-2025-0940 BeyondTrust Privileged Remote Access: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · May 5, 2025