CVEvulnerability

CVE-2024-5813

4.9 MEDIUM Published 2024-06-11 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-06-11
Last modified
2026-06-17
Assigner
13061848-ea10-403d-bd75-c83a022c2891
CVSS 3.1 (13061848-ea10-403d-bd75-c83a022c2891)
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS 3.1 ([email protected])
4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-200

Description

A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

Affected configurations

• beyondtrust beyondinsight password safe (>= 23.3 < 23.3.0.929)

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References