CVE-2023-49944 Security feature bypass in n/a

What is CVE-2023-49944?

CVE-2023-49944 is a medium-severity vulnerability in n/a, published on 25 Dec 2023. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local administrators to bypass this feature by decrypting the shared key, or by locating the decrypted shared key in process memory. The threat is mitigated by the Agent Protection feature.

Which versions are affected by CVE-2023-49944?

It affects 1 product.

Products include Beyondtrust Privilege Management for Windows.

How do I fix CVE-2023-49944?

No fix has been published for CVE-2023-49944 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-49944 being exploited?

There is no known exploitation of CVE-2023-49944 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2020-12613 Privilege escalation in n/a High 8.8
• CVE-2020-12614 Privilege escalation in n/a High 8.4
• CVE-2020-12612 Privilege escalation in n/a High 7.8
• CVE-2020-12615 Privilege escalation in n/a High 7.8
• CVE-2020-28369 Path traversal in n/a High 7.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-9rg4-33x9-wfrh.