CVE-2024-5812
Low
Description
A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only smart rules via a specially crafted API request.
SeverityLow
CVSS3.3
Exploit probability—
ProductBeyondtrust Beyondinsight Password Safe
PublishedJun 11, 2024
First seenJun 11, 2024
Weakness typeCWE-290CWE-290
How to fix
Update
- beyondtrust beyondinsight_password_safe23.2.0.1293, 23.3.0.959 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| beyondtrust beyondinsight_password_safe | 23.2 ≤ v < 23.2.0.1293, 23.3 ≤ v < 23.3.0.959, 24.1 | 23.2.0.1293, 23.3.0.959 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.