Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2024-5812

Smart Rule Overwrite Bypass in BeyondInsight PasswordSafe

A low severity vulnerability in BIPS has been identified where an attacker with high privileges or a compromised high privilege account can overwrite Read-Only smart rules via a specially crafted API request.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Beyondtrust
Products
Beyondinsight Password Safe
CVE-2024-5813

SSH Private Key Leak in BeyondInsight PasswordSafe

A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Beyondtrust
Products
Beyondinsight Password Safe
CVE-2024-4220

Information Disclosure in BeyondInsight

Prior to 23.1, an information disclosure vulnerability exists within BeyondInsight which can allow an attacker to enumerate usernames.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Beyondtrust
Products
Beyondinsight
CVE-2024-4219

SSRF In BeyondInsight

Prior to 23.2, it is possible to perform arbitrary Server-Side requests via HTTP-based connectors within BeyondInsight, resulting in a server-side request forgery vulnerability.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Beyondtrust
Products
Beyondinsight