BeyondTrust Privileged Remote Access

Remote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)

High-Severity Vulnerability In Web Application Component of BeyondTrust Remote Support and Privileged Remote Access

Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability which can be exploited through a malicious HTTP request. Successful exploitation of this vulnerability can allow an unauthenticated remote attacker to execute underlying operating system commands within the context of the site user. This issue is fixed in version 23.2.3.

Remote Support & Privileged Remote Access server side template injection

Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

Critical Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

High-Severity Pre-Authentication Vulnerability in BeyondTrust Remote Support and Privileged Remote Access

BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass. Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions, allowing unauthorized access to jump items by guessing only the first character of the secret.

Privileged Remote Access Authentication Bypass

Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)