Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: BeyondTrust Component: Beyondinsight Password Safe Clear all filters
TI-2024-05389 CVE-2024-5812 · GHSA-x47x-f96m-j7gv

Smart Rule Overwrite Bypass in BeyondInsight PasswordSafe

Priority LOW 16

A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only smart rules via a specially crafted API request.

CVSS 3.1LOW 3.3 Network High privileges No interaction EPSS 0.00266 Published 2024-06-11 Fixed in 24.1.1, 23.3.0.959 +1 CWE-290
TI-2024-05390 CVE-2024-5813 · GHSA-4p3j-h7w5-q76v

SSH Private Key Leak in BeyondInsight PasswordSafe

Priority LOW 27

A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

CVSS 3.1MEDIUM 5.9 Network High privileges No interaction EPSS 0.00406 Published 2024-06-11 Fixed in 23.3.0.929 CWE-200