BeyondTrust Privileged Remote Access Local Authentication Bypass Vulnerability

A local authentication bypass vulnerability has been identified in BeyondTrust Privileged Remote Access (PRA) versions prior to 25.1. This vulnerability allows a local authenticated attacker to access connection details of a ShellJump session initiated with external tools, potentially leading to unauthorized access to connected sessions.

Impact

Exploitation of this vulnerability could allow unauthorized access to ShellJump sessions, enabling an attacker to view and potentially interact with those sessions.