Vulnerability Description
The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local administrators to bypass this feature by decrypting the shared key, or by locating the decrypted shared key in process memory. The threat is mitigated by the Agent Protection feature.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Beyondtrust | Privilege Management For Windows | < 2023-07-14 |
References
- https://www.beyondtrust.com/securityVendor Advisory
- https://www.beyondtrust.com/trust-center/security-advisories/bt23-08Vendor Advisory
- https://www.beyondtrust.com/securityVendor Advisory
- https://www.beyondtrust.com/trust-center/security-advisories/bt23-08Vendor Advisory
FAQ
What is CVE-2023-49944?
CVE-2023-49944 is a vulnerability with a CVSS score of 6.7 (MEDIUM). The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local administrators to bypass this feature by decrypting the shared key, or by locating ...
How severe is CVE-2023-49944?
CVE-2023-49944 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-49944?
Check the references section above for vendor advisories and patch information. Affected products include: Beyondtrust Privilege Management For Windows.