Description
A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.
CVSS Metrics
- Vector
- CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
- Attack Vector
- network
- Complexity
- high
- Privileges
- high
- User Action
- none
- Scope
- unchanged
- Confidentiality
- high
- Integrity
- high
- Availability
- none
- Weaknesses
- CWE-200NVD-CWE-noinfo
Metadata
- Primary Vendor
- BEYONDTRUST
- Published
- 6/11/2024
- Last Modified
- 2/11/2025
- Source
- NIST NVD
- Note: Verify all details with official vendor sources before applying patches.
Affected Products
beyondtrust : beyondinsight_password_safe
AI-Powered Remediation
Generate remediation guidance or a C-suite brief for this vulnerability.