VULNERABILITY INTELLIGENCE
CVE-2024-5813
CVSS score5.9 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2024-06-11
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Description
A medium severity vulnerability in BIPS has been identified where an authenticated attacker with high privileges can access the SSH private keys via an information leak in the server response.
Weakness classification
- 13061848-ea10-403d-bd75-c83a022c2891: CWE-200
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- 13061848-ea10-403d-bd75-c83a022c2891 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory