CVE-2024-5813

Опубликовано: 11 июн. 2024

Источник: nvd

CVSS3: 5.9

CVSS3: 4.9

EPSS Низкий

Описание

A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

Ссылки

https://www.beyondtrust.com/trust-center/security-advisories/bt24-08
Vendor Advisory
https://www.beyondtrust.com/trust-center/security-advisories/bt24-08
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:beyondtrust:beyondinsight_password_safe:*:*:*:*:*:*:*:*

Версия от 23.3 (включая) до 23.3.0.929 (исключая)

EPSS

Процентиль: 45%

0.00229

Низкий

5.9 Medium

CVSS3

4.9 Medium

CVSS3

Дефекты

CWE-200

NVD-CWE-noinfo

Связанные уязвимости

GHSA-4p3j-h7w5-q76v

CVSS3: 5.9

github

больше 1 года назад

A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

EPSS

Процентиль: 45%

0.00229

Низкий

5.9 Medium

CVSS3

4.9 Medium

CVSS3

Дефекты

CWE-200

NVD-CWE-noinfo