CVE-2023-49944

Summary

CVE-2023-49944 is a vulnerability affecting BeyondTrust Privilege Management for Windows (PMfW) versions prior to 2023-07-14. It allows local administrators to bypass the Challenge Response feature, either by decrypting the shared key or locating the decrypted key in process memory. This security weakness could potentially enable unauthorized access to the system. However, the risk is reduced for those using the Agent Protection feature, which acts as a mitigation measure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.