Medium severity · published Jun 11, 2024
CVE-2024-5813
A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the…
4.9
CVSS
0.4%
EPSS
No
On KEV
Description
A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 35% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BP
Beyondinsight Password Safe · Beyondtrust
23.3 before 23.3.0.929 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-5813
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-5813
Vendor Advisory
https://www.beyondtrust.com/trust-center/security-advisories/bt24-08
More from Beyondinsight Password Safe
2.7
CVE-2024-5812
A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only smart rules via a…