CVE-2023-23632: BeyondTrust Privileged Remote Access

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass. Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions, allowing unauthorized access to jump items by guessing only the first character of the secret.

Affected products

• BeyondTrust Privileged Remote Access: from 22.2.1, before 22.3.3 (fixed in 22.3.3)

Published 2023-10-12. Last modified 2026-06-17.