Local Authentication Bypass Vulnerability in BeyondTrust Privileged Remote Access
CVE-2025-0217

7.3HIGH

Key Information:

Vendor

Beyondtrust

Status
Privileged Remote Access
Vendor
CVE Published:
5 May 2025

What is CVE-2025-0217?

BeyondTrust Privileged Remote Access (PRA) allows a local authenticated attacker to exploit a vulnerability present in versions prior to 25.1. This vulnerability permits the attacker to bypass authentication controls, thereby gaining access to sensitive connection details of ShellJump sessions initiated by external tools. Such unauthorized access can lead to significant security risks, as it exposes the integrity of the connected sessions.

Affected Version(s)

Privileged Remote Access 0 < 25.1.1

References

https://www.beyondtrust.com/trust-center/security-advisor...

CVSS V4

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Paul Szabo of the University of Sydney
.
CVE-2025-0217 : Local Authentication Bypass Vulnerability in BeyondTrust Privileged Remote Access