Authentication Bypass in BeyondTrust Remote Support

Executive Summary

This vulnerability is a critical pre-authentication flaw in the authentication subsystem of BeyondTrust Remote Support. It involves improper processing of authentication requests, which may allow an unauthenticated remote attacker to bypass access controls.

If exploited, the attacker can gain unauthorized access to the appliance, including accounts with elevated privileges. However, exploitation requires a specific authentication configuration to be enabled.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is severe because it allows an unauthenticated remote attacker to bypass access controls and gain unauthorized access to the system.

This unauthorized access can include accounts with elevated privileges, potentially leading to full control over the affected appliance.

Useful 0 Not Useful 0