Authentication Bypass in BeyondTrust Remote Support

Executive Summary

This vulnerability is a critical pre-authentication flaw in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. It involves improper validation of authentication data, which may allow an attacker positioned on the network to bypass access controls.

If exploited, the attacker can gain unauthorized access to the appliance, including accounts with elevated privileges. However, exploitation requires a specific authentication configuration to be enabled.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is severe because it allows an attacker to bypass authentication controls without prior authentication.

This unauthorized access can lead to compromise of the appliance and potentially sensitive data or administrative functions, especially since accounts with elevated privileges can be accessed.

Useful 0 Not Useful 0