CVE-2024-4220: BeyondTrust Beyondinsight

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Prior to 23.1, an information disclosure vulnerability exists within BeyondInsight which can allow an attacker to enumerate usernames.

Affected products

• BeyondTrust Beyondinsight: before 23.1 (fixed in 23.1)

Published 2024-06-04. Last modified 2026-06-17.