Advisory ID: BT24-08

White chain icon to symbolize the ability to copy a link
Link copied
Check mark to visually show text has been copied
  • CVSSv3 Score: 5.9
  • Severity: Medium
  • Issue Date: 2024-06-11
  • CVE: CVE-2024-5813

Summary

White chain icon to symbolize the ability to copy a link
Link copied
Check mark to visually show text has been copied

A medium severity vulnerability in BeyondInsight Password Safe has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

Affected Versions

White chain icon to symbolize the ability to copy a link
Link copied
Check mark to visually show text has been copied
Product Version
BeyondInsight Password Safe 23.3 versions before the .929 hotfix

Fixed Versions

White chain icon to symbolize the ability to copy a link
Link copied
Check mark to visually show text has been copied
Product Version
BeyondInsight Password Safe 24.1 and later
BeyondInsight Password Safe 23.3.0.929 and later

Acknowledgements

White chain icon to symbolize the ability to copy a link
Link copied
Check mark to visually show text has been copied

BeyondTrust would like to acknowledge Christian Dölling for reporting this issue.

References

White chain icon to symbolize the ability to copy a link
Link copied
Check mark to visually show text has been copied
  1. https://www.cve.org/cverecord?id=CVE-2024-5813
Want to learn why over 20,000 customers chose BeyondTrust?
Prefers reduced motion setting detected. Animations will now be reduced as a result.