CVE-2024-5813

SSH Private Key Leak in BeyondInsight PasswordSafe

State: Published
Severity: 5.9 Medium
Published: Jun 11, 2024
Updated: Aug 1, 2024
Reserved: Jun 10, 2024

Description

A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

Scores

CVSS	Score	Vector	Source
3.1	5.9 Medium	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N	BT

Weaknesses

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Affected Products

Product	Versions
BeyondInsight PasswordSafeBeyondTrust	23.3 to before 23.3.0.929Affected

References

https://www.beyondtrust.com/trust-center/security-advisories/bt24-08

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.