CVE-2023-23632 | BDVDB-2026-213952 Detail

beyondtrustprivileged_remote_access

Description#

BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass. Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions, allowing unauthorized access to jump items by guessing only the first character of the secret.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.compass-security.com/fileadmin/Research/Advisories/2023_03_CSNC-2022-018_PRA_Privilege_Escalation.txt
http://seclists.org/fulldisclosure/2025/May/1

Exploit#

No public exploit known

History#

Version 12023-10-12Record published in the CVE List.
Version 22025-11-03Most recent update recorded in the CVE List.