Security Advisory

CVE-2023-23632

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-10-12 00:00:00
Last updated 2025-11-03 19:27:59
Assigner mitre
State PUBLISHED

Description

BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass. Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions, allowing unauthorized access to jump items by guessing only the first character of the secret.