Privileged Remote Access vulnerabilities
11 known vulnerabilities in Privileged Remote Access from BeyondTrust. 11 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.9 Critical severity
Remote Support: Improper Neutralization of Special Elements in Data Query Logic
A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to the processing of certain input parameters. Insufficient validation of user-supplied input may allow an authenticated atta
- 7.5 High severity
Remote Support: Uncontrolled Resource Consumption
BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communication subsystem. Insufficient validation of client-supplied input may allow an unauthenticated remote attacker to trigger a
- 9.8 Critical severity
Remote Support: Improper Authentication
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated remote attacker to bypass access controls and gain unauthorized access
- 8.1 High severity
Remote Support: Improper Authentication
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication data may allow a network-positioned attacker to bypass access controls and gain
- 9.8 Critical severity
BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Exploited
BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability. By sending specially crafted requests, an unauthenticated remote attacker may be able to exe
- 9.8 Critical severity
Remote support & Privileged Remote Access: Improper Control of Generation of Code
The chat feature within Remote Support (RS) and Privileged Remote Access (PRA) is vulnerable to a Server-Side Template Injection vulnerability which can lead to remote code execution.
- 7.8 High severity
Privileged Remote Access: Improper Authentication
BeyondTrust Privileged Remote Access (PRA) versions prior to 25.1 are vulnerable to a local authentication bypass. A local authenticated attacker can view the connection details of a ShellJump session that was initiated with external tools, allowing unauthoriz
- 7.2 High severity
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Exploited
A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
- 9.8 Critical severity
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Exploited
A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.
- 7.8 High severity
privileged_remote_access: Improper Authentication
BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass. Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions, allowing unauthorized access to jump items by gues
- 9.8 Critical severity
Privileged Remote Access (PRA): Improper Neutralization of Special Elements used in a Command
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability which can be exploited through a malicious HTTP request. Successful exploitation of this vulnerability can allow an unauthen