Threat Investigation
Request a demo

CVE-2024-5813

Medium

Description

A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

SeverityMedium
CVSS5.9
Exploit probability—
ProductBeyondtrust Beyondinsight Password Safe
PublishedJun 11, 2024
First seenJun 11, 2024
Weakness typeCWE-200Sensitive information exposure

How to fix

Update
  • beyondtrust beyondinsight_password_safe23.3.0.929 or later

Affected products

ProductAffected versionsFixed in
beyondtrust beyondinsight_password_safe23.3 ≤ v < 23.3.0.92923.3.0.929

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.