Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2024-5813

SSH Private Key Leak in BeyondInsight PasswordSafe

Description

A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BeyondTrust BeyondInsight PasswordSafe

Default version status: unaffected

  • 23.3 to < 23.3.0.929affected

References