Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit NetSec

Reddit Cybersecurity

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

BeyondTrust Privileged Remote Access (PRA) versions 22.2.x to 22.4.x are vulnerable to a local authentication bypass. Attackers can exploit a flawed secret verification process in the BYOT shell jump sessions, allowing unauthorized access to jump items by guessing only the first character of the secret.

CVE-2023-23632 is a vulnerability identified in BeyondTrust Privileged Remote Access (PRA) versions 22.2.x through 22.4.x. The vulnerability stems from a flawed secret verification mechanism within the BYOT (Bring Your Own Terminal) shell jump sessions. Specifically, the verification process allows an attacker to bypass authentication by correctly guessing only the first character of the secret used to protect jump items. Jump items are critical components in PRA that store credentials and connection details for privileged access to target systems. By exploiting this flaw, an attacker with local access to the PRA environment can gain unauthorized access to these jump items, effectively bypassing intended authentication controls. This bypass does not require full knowledge of the secret or credentials, significantly lowering the barrier to unauthorized access. The vulnerability is local in nature, meaning the attacker must have some level of access to the PRA system or environment to attempt the attack. No public exploits or widespread attacks have been reported to date. The absence of a CVSS score indicates that the vulnerability is newly disclosed and pending formal severity assessment. However, the nature of the flaw—authentication bypass to privileged resources—indicates a serious security risk. The vulnerability compromises confidentiality and integrity by exposing sensitive privileged access credentials and potentially enabling lateral movement or privilege escalation within an organization’s network. BeyondTrust PRA is widely used in enterprise environments for privileged access management, making this vulnerability relevant to organizations that rely on it for securing administrative access to critical systems.

Detailed information about CVE-2023-23632: n/a. Get real-time updates, technical details, and mitigation strategies.

CVE-2023-23632: n/a - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-23632: n/a

Threats Tagged 'cve-2023-23632'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-23632'

Lead Pen Test Professional