Description
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication data may allow a network-positioned attacker to bypass access controls and gain unauthorized access to the appliance, including accounts with elevated privileges. Exploitation requires a specific authentication configuration to be enabled
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
BeyondTrust Remote Support
Default version status: unaffected
0 to ≤ 25.3.2affected
BeyondTrust Privileged Remote Access
Default version status: unaffected
0 to ≤ 25.3.2affected