Description
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated remote attacker to bypass access controls and gain unauthorized access to the appliance, including accounts with elevated privileges. Exploitation requires a specific authentication configuration to be enabled.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
BeyondTrust Remote Support
Default version status: unaffected
0 to ≤ 25.3.2affected
BeyondTrust Privileged Remote Access
Default version status: unaffected
0 to ≤ 25.3.2affected