VulnerabilityAnalyzed

CVE-2024-5813

A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

MEDIUM 4.9EPSS 0.41%

Does this matter?

Lower severity and a low EPSS score (0.41%). Track it; it rarely justifies an emergency change on its own.

Description

A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.

CVSS 3.1: 4.9 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.41% probability · 34th percentile
CISA KEV: Not listed
Weakness: CWE-200
Affected: beyondtrust/beyondinsight password safe
Source: 13061848-ea10-403d-bd75-c83a022c2891

References

https://www.beyondtrust.com/trust-center/security-advisories/bt24-08Vendor Advisory
https://www.beyondtrust.com/trust-center/security-advisories/bt24-08Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.